Hey Everyone,
I want to make sure I’m understanding document groups and user permissions correctly. If I assign one document to a document group which has one user, is that the only document the user has access to editing? That’s how I understand it, or perceive it in my head - but I don’t see it working that way.
I currently have a test user set up which is assigned to a user group, which is affiliated with a document group (with the one document assigned to it) and with the user group linked to the document group. (I’m using the same role for both).
However, when I login to the MODx site under the test user (in a different browser), I still see and have access to editing all documents (even though I see a lock on the document tied to the document group. It’s driving me kind of nutty! I’ve looked over the documentation and gone through the process a few times, but feel like I’m missing something obvious.
I basically need to set up two groups/permissions settings in all; one for a group that has access to editing all documents and one that has access to editing only a specific set of documents.
Thanks in advance for your help - you guys (and gals) are always great at offering advice.
msflux
-
MODX Staff
- 10,725 Posts
All documents are editable by any manager unless protected by a document group relationship, i.e. this is subtractive, not additive security. You would need to add all documents to a document group to restrict managers without access to that document group from editing them.
