Anonymous can see navigation link which should only be seen by members

I never explicitly installed Wayfinder and I also don't think it comes with the bootstrap theme or the login plugin.

Then what BobRay wrote applies. MODx itself does not do any checking when making links. It's the snippets (Wayfinder, getResources etc.) that do the permission checks, not core MODx.

Which of those snippets would you recommend to me if all I want at this point is to make the link disappear for anonymous? I don't really know what else those snippets are capable of doing and don't want to confuse myself by adding a huge amount of new functionality without using any of it.

//edit: I'm pretty sure that the bootstrap theme came with pdoTools, however I haven't been able to find a documentation for the latter. I think it includes something similar to getResource too. Is that correct? How could I use it in a way such that anonymous doesn't see the link anymore?

Personalize is the snippet to use for user-specific welcome, logout and profile links. http://bobsguides.com/personalize-tutorial.html

You can also use Output Modifiers to display things only to logged-in users.

This would load a chunk [[$loggedLinks]] only if the current user is logged in. MODx supplies a number of user placeholders.

Is it correct that I have to "hard"-code the navigation if I want to use the personalize snippet? I.e. I check the box to hide the member-specific resource from the navigation and then edit the navigation's template and put the link there?

Unless you install Wayfinder and use it for your navigation. Then you can simply depend on its permission checks to show/hide the link.

Thank you very much for your advice. I'm currently using Wayfinder by including the following code in my Navigation template where my navigation was as a list before:



This seems to be working the way I want it to already (managing permissions with resource groups). Is there anything else I have to configure or is this the way it's usually done?

That's the way it's usually done.