We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
MODX Community Forums Archive

Answered Members only - Do I really need to do this?

    • 37042
    • 384 Posts
    eladnova Reply #1, 12 years, 9 months ago
    I have 3 User Groups called

    - Sales & Marketing
    - Finance
    - Developers

    and each is connected to a specific page within a Resource Group. Effectively it gives me 'Members Only' pages (thanks to Bobs book!).

    If Sales&Marketing want to see a GetResources call listing a link to each protected page, do I really need to ...

    1. Security > Access Controls
    2. Right-click 'Sales and Marketing' > Update User Group
    3. Resource Group Access tab
    4. Add Resrouce Group for every other Resource Group there is and give it a Load Only Access Policy / Member -999 / web context)

    and do that for every other Resource group there is?

    This question has been answered by BobRay. See the first response.

      ...
      • 3109 ☆ A M B ☆
      • 894 Posts
      benmarte Reply #2, 12 years, 9 months ago
      Does each group have a different role? If so you shouldn't have to since role are inherited AFAIK.
        Benjamin Marte
        Interactive Media Developer
        Follow Me on Twitter | Visit my site | Learn MODX
      • discuss.answer
        • 3749
        • 24,544 Posts
        BobRay Reply #3, 12 years, 9 months ago
        Roles are only inherited within a user group, not between user groups. Actually, I recommend giving everyone the same role to avoid confusion, since most of the time, the only function of roles is to give users in the same group different rights and I think it's less confusing if you use separate groups for separate sets of permissions.

        As for the original question, if I'm understanding you, I think the answer is yes, but remember that resources can be in more than one resource group, so you could put all the resources in question in a group and give all three users groups some level of access to it.

        Some version of this might also work: http://bobsguides.com/blog.html/2013/05/22/protecting-pages-the-easy-way/.
          Did I help you? Buy me a beer
          Get my Book: MODX:The Official Guide
          MODX info for everyone: http://bobsguides.com/modx.html
          My MODX Extras
          Bob's Guides is now hosted at A2 MODX Hosting
          • 37042
          • 384 Posts
          eladnova Reply #4, 12 years, 9 months ago
          Quote from: benmarte at Jan 16, 2014, 08:17 PM
          Does each group have a different role? If so you shouldn't have to since role are inherited AFAIK.

          Hi bemarte

          Each UserGroup has the exact same roles - simply the ability on the front end to view their own protected pages and the inability to view pages of different departments.
            ...
            • 37042
            • 384 Posts
            eladnova Reply #5, 12 years, 9 months ago
            Quote from: BobRay at Jan 17, 2014, 03:18 AM
            Roles are only inherited within a user group, not between user groups. Actually, I recommend giving everyone the same role to avoid confusion, since most of the time, the only function of roles is to give users in the same group different rights and I think it's less confusing if you use separate groups for separate sets of permissions.

            Some version of this might also work: http://bobsguides.com/blog.html/2013/05/22/protecting-pages-the-easy-way/.

            Hi Bob I remember seeing that on your MODX video and thats why I went down this road of siloed UserGroups instead of tricky sub-permissions and sub-roles whithin a single UserGroup called 'protected' or such.

            The reason why I went down the separate Usergroups too was because it was the only way I could get the Unauthorised page to work when a userGroup tried to access a page they didn't have front end rights to view.

            I'd seen some posts about 'anonymous' Usergroups but in my site, the entire front end will be protected so there will be no anonymous UserGroup. You're either loggedin and viewing the site or you're not.

              ...