Directory access for specific Resource Group

Hello!

Modx 2.2.8

I have 2 different Resource Groups with access to 2 different sections of the website. So far, so good.

But each group has to have access to their own specific directory where all the appropriate documents are kept.
Like:
documents/members
documents/reporters

So I need to associate the directories to the groups, in order to have restricted access to only their users.
I tried the Media Source (http://rtfm.modx.com/revolution/2.x/administering-your-site/media-sources) and created a source for Members Docs with the path and permissions, as well as a TV, as per the post by "cottagestuff" in https://forums.modx.com/thread/73864/limit-access-to-file-tree-filemanager-path

I can't get it to work!
I can access my test directory without any problem, where it should require a login.

Does anyone have a solution!

Thanks!

I wonder what exactly you did, and the results you got.

Try http://rtfm.modx.com/revolution/2.x/administering-your-site/media-sources/securing-a-media-source

Thanks for your reply donshakespeare!

I followed all the instructions I listed in my post, and did it twice.
But the directory remains accessible to anyone, where I should get an "Authorization Required" message.
It's the first time I hit such a snag after 3 years of using Modx.
I was hoping for a different solution; it's very simple, I need to protect a directory and allow access only to a specific Resource Group, as I have done with the ressources associated to the members.

Resource Groups don't have access to physical directories, only Users in User Groups do. You can protect a directory from users, but you can't protect it from resources, and I'm not sure what you could mean by protecting directories from Resource Groups. Resource Groups are groups of Resources (e.g. documents). Are you maybe confusing Resource Groups with User Groups?

Bob is right!
I meant User Groups...
I did apply User Group to my Media Source, as specified in the instructions; I used the wron term in my description.
The users of the User Groups should have access to their own directory, but I can't get it to work.

Your problem is not very clear, please can you clarify:

So I need to associate the directories to the groups, in order to have restricted access to only their users.

Restrict access in the MODX Manager, Frontent or both? Are you trying to allow a usergroup one specific upload folder within the MODX manager or is there a frontend login and you are trying to restrict which folders are viewable to different groups?

I can access my test directory without any problem, where it should require a login.

I assume you mean in the Frontent as the user would already be logged in to the manager?

But the directory remains accessible to anyone, where I should get an "Authorization Required" message.

Again, are you talking about the Manager or Frontend? When refering to a "Authorization Required message", do you mean an HTTP error page like 401 / 403 or a login page as previously mentioned?

Sorry if I'm not clear, not only am I not technically incline, I'm also francophone.

Here is the situation as simple as I can write it.

The website has 3 levels:
- General public
- Members (accessible by Members and MTAs User Groups)
- MTAs (accessible by MTAs User Group)

That works great, I have no issue.
But I have related documents for both User Groups, to which I must restrict the access to only those User Groups
Documents folder
- Members (accessible by Members and MTAs User Groups)
- MTAs (accessible by MTAs User Group)

So when a member of the MTAs User Groups logs in to the MTA section of the website, he should have access to all directories with documents, and when a user of the Members User Group logs in, he must have access to the Members directory of documents.
So I need to associate my User Groups to he specific directories.
I tried with Media Source, and I can't get it to work.

All this is done by members of the association, via the website (Frontend); no user from those User Groups has access via the Modx manager.

Thank you all for your help.

Ok from what I can work out you can't restrict directory/file access in the frontend using media sources. However if anyone knows of a way I would love to hear it as well! Read the following:
https://forums.modx.com/thread/?thread=84122&page=1
https://forums.modx.com/thread/87502/modx-as-a-document-management-system
https://forums.modx.com/thread/88068/how-to-protect-links-to-external-document-pdf

I think the best way of achieving what you want is to put the files in directories outside of the web root and then use the fileLister extra (http://modx.com/extras/package/filelister) to allow usergroups access to their relevant folder. This snippet does seem to support usergroup restrictions via the '&allowDownloadGroups' parameter. Docs: http://rtfm.modx.com/extras/revo/filelister

Some more answers:
https://forums.modx.com/thread/88482/security-protect-the-content-of-a-media-source-directory#dis-post-486812
https://forums.modx.com/thread/77551/document-protection-for-members-area-in-revo?page=2#dis-post-427904

Hello!

First, I must thank all of you for your help!
Hopefully I'll soon be able to help someone with some Modx issues...

The method explained here https://forums.modx.com/thread/77551/document-protection-for-members-area-in-revo?page=2#dis-post-427904 by RX2 seems to be to most efficient one; it does require to create a Static Resource for every single document, but it does exactly what I need...and it works!!


Thanks again!