Edit Rights on Multiple Sites/Subsites and Shared User Logins. Again

Since my last question got no answers I thought I would have another go.

1. I have a national database of users to import and they should all have access to all of the forum (smf integrated)
2. The individiual logins should only be able to get to the hidden parts of their own regional subsite and not the hidden parts of other subsites.
3. The subsites might be just redirected under regional folders from a domain alias or complete instances of modx sharing one user database

I have experimented with manager user rights and for the life of me cannot "hide" or prevent editing of groups of pages or folders from unauthorised manager users. I have made pages beling to specific document groups and logged is as a manager without those rights and can still see and edit them. What am I doing wrong?

Can I have different front end and back end groups? I might want http://www.somsite.com/subsite/ to be publicly viewable but only editable by subsite edit groups. How do I do that? Is it even possible?

I feel as if I am being particularly thick here but being able to select in Access Permissions:

All Document Groups (Public) for WEB access
SomeEditorGroup for MANAGER access

is a vital thing to be able to do but its not there....or is it...

Julia

The manager users/groups are totally separate from web users/groups.

Document groups work for both.

To restrict a document for manager users:

1. Create a manager user group.
2. Create a document group.
3. Associate the manager user group with the document group.
4. Assign manager users to the manager user group (and to a role).
5. Assign documents and/or TVs to the document group.

Permissions (group assignment) determines which documents and/or TVs a manager user can access.

Roles determine what the manager user can do with the documents he has permission to access. They also limit or deny access to other elements such as snippets and the file manager.

To manage your web access for different regions, simply create web user groups for each region and assign the users to the appropriate group. The documents would be assigned to the corresponding document groups.

As far as integrating user management across sites or across applications, I’m afraid there’s no easy way to do that.

I appreciate that the groups are separate front and back end but there is a flaw...I think.

I might want page 2 to be visible by the general public and only editable by regionA editors. I have uncheck the box "All Document Groups (Public)" so as to get the specificity I want in the manager section. The snag is that this is shared with the front end and there is no default web user group "Everyone" or "Anonymous" I can assign to that pages front end document group.

So effectively I wind up turning the page off from the front end anonymous if I uncheck the "All Document Groups (Public)" which I have to do to limit its editing....

Is there an easy way to get an Anonymous group?


I found this in the docs..

"Example:
From the Web (Front-end):

From the Manager (Back-end):

Note: A document is flagged as private whenever the document group that it belongs to is assigned or is linked to a user group. In other words if the document is assigned to a document group that is not yet linked to a user group then that document will be made public. Documents that are private to the manager users will not be private to web users if the document group is not assigned to a web user group and vice versa."

This is pretty confusing to administer and sort of works backwards. It would still be nice to be able to positively assign an "anonymous" groups.

Julian

Don’t assign a web user group to a document group and it won’t be private for the front-end.