Full Access

Hi Guys,

Im new to Modx and I'm trying to setup a new website with a few ACL's

Administrators - full access
Content Editors - add/edit/delete
Members - web context only with hidden pages
Anonymous - web context only

the problem im having is when i add a new user either in a group or not they have full access to the manager and i cant seem to block access to it.

Ive tried a clean install with just a members group with web context load only and it still gives users in that group full manager access.

is there a setting im missing somewhere? sorry for the silly question.

P.S. Ive been using a different PC to test the access to completely avoid the sessions problem.

Cian

Can anyone help with this ?

Revo permissions are a bit complicated. Try this http://bobsguides.com/revolution-permissions.html

Quote from: sottwell at Oct 31, 2012, 02:50 PM

Revo permissions are a bit complicated. Try this http://bobsguides.com/revolution-permissions.html

Thanks for that, ive looked over it before and im starting to understand Revo Permissions a little more, what im confused about though is i thought it was deny allow but for some reason evan when i deny access to something for a user and flush permissions that users still has full access

Hey,

ive created a user with no permissions and that user still has full access to the modx manager, why is this happening its the only thing stopping me using modx!

You're not assigning it as sudo are you?

That was one of the first things I checked, I even looked in the DB and its set to 0.
Could it be some server settings that's triggering it because I've got the same problem on a clean install too?

Are you logging in as this user through a different browser?

As eladnova mentions, be sure to either use a different browser or an Incognito/Private Browsing window to make sure there are no live sessions.

It would be good to see the settings you have in place for just one of the limited user sets. Take us through your expected results for your "Content Editor" and what rights/limitations you want as well as those settings you've applied for them.

What I normally do is duplicate the Admin User and start removing permissions. It should be stated that there are some permissions that disallow actions but still allow users to see the function/action in the view. This is a limitation of some of the permissions and it is possible to hid them via Form Customization or modifying the Actions menu.

All the best,

Jay

Im using Safari for the administrator and Chrome for testing the user

my goal is to have 4 access levels

Administrator: full access to frontend and manager

Content editor: limited access to manager(add/edit/delete resources) full access to frontend

Members: full access to frontend (upon login) no access to manager

Guests: limited access to frontend with no login required

Ive duplicated the administrator access policy and removed the permissions for the content editor and tried that but still getting the same results, heres a link to the export of the access policy im using:
http://basc.itx-servers.com/content-editor.policy.xml

i can give you a login if needed as its only a development website at the moment.

Thanks for all the help

Cian