How do I prevent a user from seeing a context in the manager?

Using MODx 2.2.4-pl and trying to make a user group see ONLY a specific context in the manager? I've setup all the ACL's but the user can still see all contexts that have been setup. I need to do the following:

web (no access)
context1 (full access)
context2 (no access)

I've tried setting Resource groups, context access etc etc.

Perhaps, I am just getting a little confused by what you can and can't lock the user to in the mgr.

Would appreciate the help.

Thanks,
Jon

Are you sure you mean "context"? I can remember that it does not mean "part of all resources" but something else.

Looks like everything I have sofar, will only limit access to the front-end context... (I did mean context yea).

This is completely dependent on your Context Access Permissions. If you edit the Context and select the Context Access tab, what ACL entries do you currently have for that Context? The users in question should have a Load Only policy with only the load permission (so they can load the Context when viewing on the front-end). The list permission controls the visibility of the non-mgr Contexts in the Resource tree, save controls the ability to save changes to the Context, etc.

hey opengeek, thanks for your reply. Ben Marte has been helping me out, the core problem here was session.auto_start in my php config was killing the sessions for whatever reason. Once I removed this all the silly behaviour with the sessions and everything else was working as it should then everything after was plain sailing. I guess we can mark this as solved.

Thanks again for the reply though