Getting TV Type Resource List to respect Permissions

Hello,

We've placed some resources, like the Search Results page, in a Resource Group we've called Locked Public. It's available to be viewed on the front end, but in the Manager, the content editor cannot view it because they do not have access to that Resource Group.

However, when using the TV type Resource List, the content editor can see all the Resources regardless if they have permission to view them. Is there a way to get the TV to respect Resource Group Permissions or should we just move to a model of the user inputing the document ID manually?

I've definitely come across this before. Something to do with the load,list and view permissions I think.

I couldn't figure it out. The JSON filter might work but I don't know JSON so I just converted to the user inputting the document ID directly.

There's gotta be a way. Tired asking on twitter and GitHub etc?

Ok. The resources need to belong to a resource group that the user's group does not have access to.

I set up a user group "private" that can edit (mgr) and load, list and view (web) resources in a "private" resource group. The anonymous group was given load-only access in (web).

I set up another resource group, 'admin', that connects to the Administrator user group (mgr). Now only Administrator users can see the resources in the 'admin' resource group in the Manager, the 'private' users cannot. This includes a ResourceList type TV. [ed. note: sottwell last edited this post 12 years ago.]