Answered ACL: only access part of resource tree in mgr

hi
i want a user for managing only part of my website so i created new accessPolicy with doplicating administrator pollicy and remove many cheks like update_resouce save_resouce and many others
so the user cant edit any resources
try to add access to part of the tree in manager with creating resource group and add AccessPolicy:Resource(ctx:mgr) but nothing happend

how can i creat a usergroup with only access to edit/update the part of a tree(child of resource with ID=8) in manager?

how do you mean "nothing happened"?

basically to hide everything else, you need to create an "admin" resource group (which your Usergroup has access to), add all resources to that group and then create another resource group like "client" and add the documents the client should be able to see to that resource group...

These might help: http://vimeo.com/54360208

http://bobsguides.com/revolution-permissions.html

hello Dear BOB AND Dear exside and dear others

i want two user groups

1) super admin(me) -> access to every thing and every document
2) news admin(my friend) -> only access to resource 8 and children of this resource

this is the example tree of my website with two context(web/german):

web
|_welcome(1)
|_about us(2)
|_products(3)
|_news(8)
| |_awards(9)
| |_new products(10)
| |_other news(11)
|
|_some other pages(12)

german
|_welcome(4)
|_about us(5)
|_products(6)
|_news(13)
| |_awards(14)
| |_new products(15)
| |_other news(16)
|
|_some other pages(7)



my user most access to evey pages
my-friend user most access to (8 9 10 11 & 13 14 15 16 ) only

if i add my-friend to admin group then he will be accessed to evey pages
so i do the folowing changes :
1)create a resource group called news-pages
2)create access-policy from admin access-policy-template and remove some checks(update_resouce delete_resource save_resource ....) and name it "news-policy"
3)create a user-group called news-manager
4)add my-frind user to news-manager group
5)add news-policy to news-manager group
---- in this state my-frind can view any page in manager with action 28(resource/data) and no access to action 30(resource/update)
---- in next states i most add edit and save access to pages : (8 9 10 11 & 13 14 15 16) so i did the folowing steps (bot nothing happend. i mean poermissions not changed)
6)add created resource group in step 1 (news-pages) to news-manager group that i create in state 3
i hope step 6 add access to pages 8-11 and 13-16 but nothing happend. my frind can only view any pages and no diffrent between page 8 and 4 or 12

if i change news-policy (created in state 5) and checked update_resource and save_resource he can modify any pages in manager!!!! not only (8 9 10 11 & 13 14 15 16 ).

help me please
regards

thanks

It works but i have another question
my site is developing very fast and many pages added to it daily
in your solution i most add any resources to admin resource group (right after creation)
and limited users resources most be added to their resource group (right after creation)

so it is impossible for me to add all of them after creation one by one. maybe other solution is : creating plugin to add any created resource to a resource group (with checking user group whom created that resource)

but is there any other solution that don`t need admin-resource-group?

Here's my Extra, but it's fairly limited. It adds all new Resources to the same Resource Group. http://modx.com/extras/package/defaultresourcegroup

If you can describe the logic of selecting an appropriate Resource Group to put a new resource in, and it would be of general use, maybe I can create a plugin to do it.

thanks to bob and exside

my problem was solved

i will post my plugin if it compleated

regards