I have 4 user groups. Admins (0), Editors (1000), Writers (8000) & Contributors (9000).
The admins and editors can create new users. But I want the editors to only be able to create high level users like Writers and Contributors. And not be able to create new admins or other editors.
Is this possible? Or can you only turn create user on/off for a user group?
--
André
-
☆ A M B ☆
- 1,780 Posts
There's no way to restrict users from creating any kind of user they want, or deleting any user (even the administrator). The only way to secure or restrict user create/delete users is to turn it off entirely for all users but the administrator.
You can hide the security menu from some users if you like. That will keep them out of the user area.
-
☆ A M B ☆
- 1,780 Posts
"Might be" is an understatement. I believe there's a feature request already but I'd have to check to be sure.
If you're using Revolution, I don't think it would be too difficult to make a "create user" form for the front end that would do what you want. In Revo, it's relatively simple to check permissions and create users. You can toss out user without manager credentials and some permission. Here is a somewhat sketchy example off the top of my head:
<?php
/* only works when previewing from Mgr */
if (! $mod->user->hasSessionContext('mgr')) {
return 'Must be logged in';
}
/* requre create_writers permission */
if (! $modx->user->hasPermission('create_writers') {
return 'No create_writers permission';
}
/* standard form processing stuff here,
sets user fields from $_POST
**************************************** */
/* Create User */
$modx->runProcessor('user/create', $fields);
------------------------------------------------------------------------------------------
PLEASE, PLEASE specify the version of MODX you are using.
MODX info for everyone:
http://bobsguides.com/modx.html
