Manager user with limited rights to Content Editor still can see Element Tree which is turned off in policy. Why?

Hi,
I need only limited access for some manager users not to see element tree. According to tutorials (e.g. http://bobsguides.com/hiding-elements-in-the-manager.html) everything works fine but only on my local machine. After moving to server, user with limited rights still can see an element tree. Where could be the problem? PHP?

Thanks
M.

My version of Revo is 2.2.8-pl, PHP Version 5.3.17, MySQL 5.0.67.

1. Clear your browser cache and cookies, and manually clear the core/cache directory.

2. Carefully go over the ACL and permissions again; something may have gotten scrambled during the move.

If Susan's suggestions don't solve it, maybe the remote site has another Context Access ACL entry giving the user that permission, or the user is a member of another User Group there that has that permission?

Thanks to all. Unfortunatelly nothing changed, I tried to clear install modx at server, add just one user belonging to one group with limited rights (element_tree is switched off, tried switched off file_tree for test), cleared cache, reset permitions, sessions, cleared browser cache, manually core/cache and nothing changes. New user still can see both element and file tree. If I do the same on localhost, everything is OK. So I suppose it is server related problem. Any other ideas? Thanks. Including phpinfo().

M. [ed. note: monami last edited this post 13 years, 2 months ago.]

Check your server's error logs. Perhaps it's a version problem with PHP.

It's a long shot, but make sure the user is not a sudo user and is not a member of the Administrator user group.

After clear installation, there are only two users Administrator in Administrators group and say Editor in Editors group with limited rights. Maybe really problem with PHP version, I will test it.

Thanks.

The problem is solved. It was caused by wrong settings in .htaccess where php_flag session.auto_start was set to 1 thus session state was concidered as external and all rights tests were returned as true. After changing session.auto_start to 0, everything is OK. Thanks.