ACL Anonymous User Group for Wayfinder document list

I'm looking a solution that allows anonymous users to view a list of documents/(resources) defined in the Resource Groups.
I would like to use Wayfinder to only display a list of documents. Links to secure the documents I want to lead the unauthorized page. (401?)

I used: http://rtfm.modx.com/display/revolution20/More+on+the+Anonymous+User+Group

My settings:

Zoom image: https://lh3.googleusercontent.com/-89Buj2Dh590/ULkFq1gyRtI/AAAAAAAAAnI/QPkJY9C5R48/s800/step1.jpg

Zoom image: https://lh4.googleusercontent.com/-Bo9EDJtBNqg/ULkFtJkGI_I/AAAAAAAAAnQ/ihJN_Li5wQs/s800/step2.jpg

Zoom image: https://lh4.googleusercontent.com/-Bo9EDJtBNqg/ULkFtJkGI_I/AAAAAAAAAnQ/ihJN_Li5wQs/s800/step3.jpg

Wayfinder work properly but unfortunately, this solution hides the protected documents on my list. Finally I would like to get such a list, where some documents are locked but show on this list with a padlock, and the link is directed to the login page, or 401 error.

Can anyone help? Any ideas?

--
[Sorry if my English is not perfect. I tried ] [ed. note: MIkhaell last edited this post 13 years, 10 months ago.]

You might want to try an ACL with "list" permission for a resource group. I'm still a bit hazy about Revo's permissions, but I think that might do what you want.

Quote from: sottwell at Nov 30, 2012, 10:30 PM

You might want to try an ACL with "list" permission for a resource group. I'm still a bit hazy about Revo's permissions, but I think that might do what you want.

Hmmm, But I already have the permission "Load LIST and Viev" to resource group...
https://lh4.googleusercontent.com/-Bo9EDJtBNqg/ULkFtJkGI_I/AAAAAAAAAnQ/ihJN_Li5wQs/s800/step3.jpg

Finally of course I will have to discard "view" but now, with the larger permits the documents do not show.

That resource group is connected to a specific user group, is it not? That gives users in that group "load list view" permissions. Create another one with only "list", assign the resource to it, and connect it to the Anonymous group. I think that should work.

Quote from: sottwell at Dec 01, 2012, 05:34 AM

That resource group is connected to a specific user group, is it not?

I have only 2 standard groups: anonymous, admin. All operations are carried out only for the anonymous. I do not have other user groups.


I will present the steps that I have done:

1. I create Access Policy only for "List"
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/57aae6f3-43dc-48b9-9bf6-1a1e547c8ce8/2012-12-01_1328.png
2. I create a new Resource Group named UserAccoynt
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/ef645a1b-a42c-4933-bc88-0db8d9d71569/2012-12-01_1352.png
3. I added a few document to newly created group, named UserAccoynt
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/e895c9b9-f70a-4e21-a827-0182a4d0b0cc/2012-12-01_1353.png
4. Quick look on my Access Control groups
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/dea0ebae-be1e-44af-8a60-93516523c06e/2012-12-01_1354.png
5. I checked Roles. It's OK
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/e6ed2b2c-d12f-4070-8484-6b00be14fe0b/2012-12-01_1355.png
6. Once again, I check the Access Policies for "List". It's OK.
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/31d1551a-a2de-429c-b00d-2057d38f0692/2012-12-01_1356.png
7. Now, I update user Anonymous
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/b110f8ff-1764-4c0c-ab22-154f38bd5971/2012-12-01_1356.png
8. In tab Context Acces, I add new entry: web, member-9999,load list,wiev. I'm not sure, that this step is needed
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/109bf818-39a7-45c9-b1a8-10f1e9e82b56/2012-12-01_1357.png
9. Now, I go to Resource Group Acces tab, and add new entry: UserAccoynt, Member-9999, List, web
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/f871b8a0-8b0a-4d88-8a65-a847fff7a407/2012-12-01_1400.png
10. Flush Permissions
11. Clear Cache
12. In new browser I open my site. My list is not correct - documents are not shown.

13 In Resource Group Acces tab, and I add next entry: UserAccoynt, Member-9999, Loar,List,View, web
http://content.screencast.com/users/graphicsitegroup/folders/Jing/media/438bd046-5a27-4160-a90c-103d355257f9/2012-12-01_1402.png
14. Flush Permissions
15. Clear Cache
16. In new browser I open my site. My list is not correct - documents are not shown.


Where can it be wrong?

Part of the problem may be due to the fact that anonymous users aren't logged in.

From Bob's Guides:

Here are some things to remember:

In order for MODX to do anything user-specific, the user has to be logged in, so MODX knows who the user is.

Although for your purposes, you want to use the anonymous user group to show protected resources so you'll have to protect those resources if you want to use ACL's for your logged in users who do have access.

An option might be to password protect the documents instead, and I think there's an Extra that will do that now but I haven't explored it yet. However, this will change your plan for the site as those resources can't be protected with ACL's if you want to show them in the menus.

Maybe someone else knows how to write a snippet to override the protected pages being shown with Wayfinder or GetResources so you can show the protected pages. I'm not able to help with that, sorry.

The actual name of the (anonymous) user and its group is (anonymous), with the parentheses.

You might be able to spoof Wayfinder by creating SESSION values using the user ID 0 and setting up the SESSION as if the user were authenticated. The actual authentication system is very complicated, though, so it's hard to tell what unintended consequences that could have.

A much better idea would be a simple custom listing snippet that didn't bother with authentication to make lists of links out of resources.

I thought that this will be easier. Parameters "list" and "load" suggested that I can make my list straight from the ACL. Well, too bad. Such a function probably would be useful to many users in various projects.

It therefore remains to build your own snippet. If anyone would have any suggestions, please write to me.

Thank you guys for the foregoing involvement. [ed. note: MIkhaell last edited this post 13 years, 10 months ago.]