We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 39583
    • 103 Posts
    I've duplicated the original Access Policy called "Load Only" and added List, so it has two permission.

    Then in a user group I have added this policy to a resource group. When I select it from the drop down it shows load, list in the text line under. But after saving access policy and then the user group and the edit the same resource group access it shows the name of my access policy but the permissions have suddenly increased to list, load, remove, save & view.

    But if I select one not duplicated by me it works and stays the same. This happens when I create policy as well.

    Is this a bug or am I doing something wrong?

    Using rev 2.2.5 pl-trad
      --
      André
      • 10208 ☆ A M B ☆
      • 1,780 Posts
      Did you flush permissions?
        Frogabog- MODX Websites in Portland Oregon
        "Do yourself a favor and get a copy of "MODX - The Official Guide" by Bob Ray. Read it.
        Having server issues? These guys have MODX Hosting perfected - SkyToaster
        • 39583
        • 103 Posts
        Quote from: frogabog at Nov 07, 2012, 12:19 PM
        Did you flush permissions?

        Yes I did, and all the permissions I dont want is still there.
          --
          André
          • 39583
          • 103 Posts
          Is this a bug as well? Should I report it somewhere so it could be fixed for 2.2.6?
            --
            André
            • 3749
            • 24,544 Posts
            The permissions that show up are based on the Policy Template, not the Policy. The LoadOnly Policy is based on the Object Policy Template, which has those 5 permissions.

            If you don't want to see them, you need to create a new Policy Template with just the permissions you want to appear.

            Maybe I'm misunderstanding you. Are you saying that all those permissions are checked even though you've saved the policy with them unchecked? That would be a bug.



              Did I help you? Buy me a beer
              Get my Book: MODX:The Official Guide
              MODX info for everyone: http://bobsguides.com/modx.html
              My MODX Extras
              Bob's Guides is now hosted at A2 MODX Hosting
              • 39583
              • 103 Posts
              Quote from: BobRay at Nov 20, 2012, 03:56 PM
              The permissions that show up are based on the Policy Template, not the Policy. The LoadOnly Policy is based on the Object Policy Template, which has those 5 permissions.

              If you don't want to see them, you need to create a new Policy Template with just the permissions you want to appear.

              Maybe I'm misunderstanding you. Are you saying that all those permissions are checked even though you've saved the policy with them unchecked? That would be a bug.


              Hi Bob,
              thanks for your reply.

              I made a duplication of the access policy "Load Only" which is based on the ObjectTemplate Policy Template. This one has 5 permissions in it but in "load only" only one of them is checked.

              In my duplication I have load and list checked. And this is saved when I go in and edit this access policy later.

              But when I update a user group, (anonymous) as an example. I go to the Resource Group Access tab. Add a new resource group and select my access policy with list and load. Underneath you have the following text in the popup:

              The Policy to apply to this Context with Resources in the Resource Group for this User Group. This will grant all Users in this User Group with the selected minimum Role all the Permissions in the Policy.
              Permissions in Selected Policy
              list, load

              I click save and it closes. But then if I update this resource group access that I just created it will say in the bottom that I have all the five permissions like the following:

              Permissions in Selected Policy
              list, load, remove, save, view

              So my question is if it then has all these permissions or not? Or is it just a bug? If I select the pre existing "load Only" then it will only say load there.

              I found a work around which is to create a new policy template with only these two permission in it and select them when I make an access policy based on that template.

              Do you think this is a bug?
                --
                André
                • 3749
                • 24,544 Posts
                It kind of sounds like a bug, though without testing it's hard to say whether it's a permission bug or just a display bug -- the question being whether the users actually have those permissions or not. If they do, it would be a serious bug. If not, it would be a less serious bug.




                  Did I help you? Buy me a beer
                  Get my Book: MODX:The Official Guide
                  MODX info for everyone: http://bobsguides.com/modx.html
                  My MODX Extras
                  Bob's Guides is now hosted at A2 MODX Hosting
                  • 39583
                  • 103 Posts
                  Quote from: BobRay at Nov 21, 2012, 11:15 PM
                  It kind of sounds like a bug, though without testing it's hard to say whether it's a permission bug or just a display bug -- the question being whether the users actually have those permissions or not. If they do, it would be a serious bug. If not, it would be a less serious bug.


                  I checked in the database and these it seems to have the permissions I selected. So I think its more of a viewing bug, but I'm not a MODx pro. This happens for me on new installs of 2.2.5 and 2.2.6 dev, on two different servers.
                    --
                    André
                    • 45287
                    • 1 Posts
                    I confirm this issue on 2.2.9-pl (traditional).
                    XAMPP localhost setup.
                    I can provide additional testing on demand.