I have one other person than myself, and that person will be getting limited rights. I've set up my user group and create the new user. I missed the step in Bob's notes about creating a role and giving it a level of 9 or some random number. When I added this user to the user group, I just selected the default "member 9999" as their role. I then added myself to that group to, but giving myself the role of 'superuser 0". Is that an OK way to handled it?
I understand that roles are meant to provide different levels of access to members of the same user group. And essentially, that is what I am doing. I get the role of superuser 0, and my other user gets the role of member 999.
Just wanting to make sure that I understand correctly. I guess in the event we get many more users requireing varying levels of roles, I can always go back and rework, or start from the beginning if I need more specific security.
That's fine. My general advice, though, is to put users who need different access levels in different user groups. It makes permission problems *much* easier to diagnose and gives you more options for Form customization. In fact, in my talk at modExpo I suggest giving everyone but the main admin the same arbitrary role, since the only reason for different roles it to have users in the same group with different rights -- which I recommend against.
The exception (which is kind of your situation) is to put the main admin user in every group with a role of admin Super User.
I tend not to use 'member' as a role because that's the role of the (anonymous) user and there could be a situation where you'd want to add the (anonymous) user to a group but with less rights (though TBH, I've never had to do it).
The bottom line, though, it that whatever works and makes sense to you is fine.
Thanks Bob. I watched your tutorial from MODXpo last night. Very excellent. Spot on. Exactly what I needed to bring me down off the ledge.
I was thinking that I could go back in and assign a new role to my user, but I'm not sure if that is possible at this point. So far, what I have is functioning, so maybe like you say, whatever works. I'm sure I'll get more confident with it and eventually be able to set up more complex situations. I feel like I want to set up a blank MODx site and do nothing but play with the security aspect until I really have confident understanding of it.
Thanks again for the feedback. Much appreciated.
