We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 39291
    • 19 Posts
    Hello,

    I use Revolution 2.2.4-pl and want to give to a user of a user group access to only 3 specific documents (web pages) of the resource tree.
    I created a New User Group in Access controls and gave "Super User" Role, context "mgr" and Access Policy "Content Editor".
    That works fine.
    I created a resource group for these 3 specific documents (web pages)
    In Access Controls I gave for this resource group "Super User" Role, Access Policy "Resource" and context "mgr".

    The problem is that in the manager, the resources I gave free don't appear in the resource tree (for the user of this user group).

    My question is: Have I done a mistake or is it a bug? And if I did a mistake, can somebody tell me what is wrong?
    My user has a role of "Super User" and I did "Flush Permissions" and "Flush All Sessions" but it doesn't help
    I work with The Official Guide of Bob Ray.
    Thanks
    Irène

    This question has been answered by frogabog. See the first response.

    • discuss.answer
      • 10208 ☆ A M B ☆
      • 1,780 Posts
      Did you make your allDocs resource group?
        Frogabog- MODX Websites in Portland Oregon
        "Do yourself a favor and get a copy of "MODX - The Official Guide" by Bob Ray. Read it.
        Having server issues? These guys have MODX Hosting perfected - SkyToaster
        • 39291
        • 19 Posts
        Wow thank you very much Frogabog, it was exactly the problem.
        I created a resource group with all docs and added my name in the user group.

        This thread helped me too (I found it with the keyword "allDocs"):
        https://forums.modx.com/thread?thread=75894

        :-)
          • 3749
          • 24,544 Posts
          A good tip from Frogabog (as usual). The key is that Resources that are not in a Resource Group are unprotected and can be accessed by anyone. In addition, Resources that are in a Resources Group that is not connected to a User Group with a Resource Group Access ACL entry are also unprotected.

          IOW, When it comes to protecting Resources using Resource Groups, Resources are only protected (i.e., hidden) for a given user if:

          1. The Resources are in a Resource Group
          2. That Resource Group is connected to a User Group that the user is not a member of by a Resource Group Access ACL entry.

          You might find this video useful (warning: it's about an hour long): http://modxpo.eu/schedule/sessions/modx-revolution-security-permissions-system
            Did I help you? Buy me a beer
            Get my Book: MODX:The Official Guide
            MODX info for everyone: http://bobsguides.com/modx.html
            My MODX Extras
            Bob's Guides is now hosted at A2 MODX Hosting