I've managed to do this before but each time it's an almighty struggle.
All I want to do is limit a certain user group to one directory in the file manager.
Yes I created the media source and assigned it to the user group. Yes they are only assigned to that media source. And I know the media source navigates to the right folder, because it shows up in my administrator account and works perfectly when I click on it in the left file tree navigator.
And yet, the user group is able to view everything - they are not limited to the directory I assigned in the media source.
What the heck am I doing wrong?
-
☆ A M B ☆
- 1,780 Posts
View this:
http://designfromwithin.com/blog-webdesign-development/2012/08/28/modx-acl-customize-the-manager-using-access-controls,-user-groups-and-roles/
At about 15:30 he goes into hiding the filesystem from the user, which involves modifying the filesystem access permissions for administrator.
Which is where I ran into problems because there were no policies to choose from.
do the other mediasources have assigned any usergroups?
If not, you should assign, all other usergroups to them, but not the limited group.
does this help?
-
☆ A M B ☆
- 1,780 Posts
Well, I decided to replicate the missing media source policy template and policies, and assign to the filesystem to close up access. I actually created totally new policies, based on the media source template, assigned all 7 permissions to the media source admin policy, and 3 for the media source user. (load, list, and view). Flush permissions, clear cache, flush sessions. Login for admin, all is well.
Login for user/editor and it seems fine, till I try to access the upload directory.
I get "access denied" for my test limited user now too. I added the limited user group to the limited media source, with the same result.
