Restricting an admin (mgr) to only view/edit/create users from a specific 'user group' ?

I'm trying to create a "front-end members manager" (web context).

(1)
Is it possible to create an admin user (mgr context) that can only list/view/edit/create the users from a specific "User Group"?
In other words, I would like to hide the users & user groups for the admin to which he/she is not part of. Makes sense?

(2)
Additionally, it should not be possible for this admin to view the "settings tabs, extended fields tab, access permissions tab & Sudo User checkbox" when editing/creating a user.

Any input is appreciated!

User management is not that granular. If you have permissions to manage users, there is no further control.

I was afraid of that. Perhaps there's a way to tweak things a bit with custom css/js in the manager's html
Thnx Susan.

It might be possible to create a plugin connected to OnUserFormPrerender or OnUserFormRender that does it. You'd have to see if $modx->user is available at that point (and is the current user), and if the $user variable holds the user object for the user about to be edited. I'm not sure. If you get both of those, you can use

to check memberships, and if they're not authorized, forward them somewhere with



The forward can be to a front-end page or some page in the Manager.

The user about to be edited should also be available as $_GET['id'], but you'd have to get the user object with this before calling isMember().

I wasn't aware there was a system event connected to the user form, this sounds like it could go somewhere.
Gonna try this out and report back for anyone else that's interested to know, thanks Bob!

Yes, it's certainly possible to use those events to prevent actions taken on a user creation/editing form. I looked, but I didn't find any events for working with the user list display.

If limiting the actual user list display is necessary, you could use one of the user listing snippets, and have the tpl contain a link to the Manager for editing the selected user. I know that pdoUsers lets you filter the user list by group. If the resource containing the snippet is unpublished, then only logged-in Manager users with view_unpublished permissions could access the page.

It's probably also possible to use the snippet in a CMP, although I'm not sure exactly how that would work.

It's also possible to create a CMP that's based on, and replaces, the current Manage Users panel. Then, you can prevent users from showing up on the list by modifying the user/getlist processor.

It's not too difficult, but once you have it, you'll probably think of several other things you want it to do and those will not be so easy. [ed. note: BobRay last edited this post 12 years, 3 months ago.]

Its easy to build a CMP, which does that, with help of MIGXdb.
We did that several times.

Here's an example
https://github.com/Bruno17/migxclientmanager

Quote from: Bruno17 at Jul 03, 2014, 11:32 PM

Its easy to build a CMP, which does that, with help of MIGXdb.
We did that several times.

Here's an example
https://github.com/Bruno17/migxclientmanager

This looks great!
Are there any additional things I need besides this package to be able to add users aswell?
Just enabling the 'addItem' action didn't work & nothing showing up in error log (latest version migx/modx).

Thnx!

you will need some code here:

https://github.com/Bruno17/migxclientmanager/blob/master/core/components/migxclientmanager/processors/mgr/default/update.php#L82

and call


if it's a new object.