Actually the links are working but the pages return a "404 Not Found" if you look at the http response headers. I guess your anonymous users don't have the permission to load the resource group and context?! You should take a look at your permission settings and correct them ... and don't forget to flush the permissions.
A good start to see what's happening is to create a custom error page. Then in your site settings ensure that this new error/404 page is set to use this new resource.
Then it'd be easier to see what's happening without looking at the headers.
It could be a number of things: my usual mistake though is a badly formed template, often calling a snippet incorrectly and thus causing an 'error' page to be shown instead of the broken template.
-
☆ A M B ☆
- 894 Posts
Did you put these resources in a resource group and applied permissions to a specific user group? If so it's a permissions issue it not it might be something else.
Start by making a custom 404 page like @Devolute suggested so it can be easier to debug and help you solve your issue.
Thank you for all your responses.
I am still totally confused of how to set up the Access Controls. I might have messed up something there. This is how it's set up right now:
I have a User Group "Administrator" and one "Content Editor", where I belong to Administrator, with 0 as the rights settings.
Under "Context Access", I have set up mgr and web contexts for both groups, with minimum roles Super Users-0. Is this the problem?
How do I set up the rights for the anonymous users? Currently under this user group, there only is the web context set up, with min. role Member-9999, and Access Policy Load, List and View.
-
☆ A M B ☆
- 894 Posts
Did you create any resource groups and move resources into them?
Yes I did, but all the resources are added for the Administrator users (the one I am using). What am I still doing wrong?
Is there any way to reset all access controls to the default settings, so I can start setting those up from scratch again?
-
☆ A M B ☆
- 894 Posts
You only need to put the resources you want protected in the resource group if you put all resources in the resource group they will be hidden from the anonymous user group, you can check out my
ACL tutorial it might help clarify some things for you.
MODX permissions are all based on allow/deny what this means is you have to strictly deny access to any resource you do not want users accessing otherwise the default permission will be applied which is allow.
I have to make an updated tutorial that is much easier to implement than this one.
-
☆ A M B ☆
- 894 Posts
Let's say you create a resource group for admins you would need to place whatever resources you want to be accessible by admins only in this resource group.
Then you go to Security > Access Controls right click on your user group, select update user group and go into the Resource Group Access tab here you specify if this user group will have access to the resources in this resource group.
ACL's are very confusing at first but once you get the hang of it you can do some very powerful stuff with it I have sites where clients never log into the manager and update the site via, manage users and upload files via the front end.
