We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 42459
    • 3 Posts
    Hi,

    after upgrading from MODX 2.2.6 to 2.3.2 users with limited manager access always get the following error message after saving a document/resource:

    Code: 200 OK
    {"success":false,"message":"Access denied!","total":0,"data":[],"object":[]}

    In fact the document IS saved and the message must be for some additional data which isn't relevant currently. I already tried to add several permissions to the ACL but none of them made anything better. Of course I didn't add everything. Saving with admin access works fine.

    The really annoying part in security related errors is that one can't find any hint which permission is missing. Neither in the error message nor in the error log :-(

    Any idea which (new?) setting is missing after upgrading?

    Thanks & greetings from Germany,
    Christian

    This question has been answered by chluebke. See the first response.

      • 3749
      • 24,544 Posts
      Some users have reported that adding the class_map permission solved this.
        Did I help you? Buy me a beer
        Get my Book: MODX:The Official Guide
        MODX info for everyone: http://bobsguides.com/modx.html
        My MODX Extras
        Bob's Guides is now hosted at A2 MODX Hosting
      • discuss.answer
        • 42459
        • 3 Posts
        Quote from: BobRay at Nov 05, 2014, 03:07 PM
        Some users have reported that adding the class_map permission solved this.

        Thanks Bob, but that wasn't the solution in my case. I needed to add the view_user permission. Maybe because the users are able to edit their own profile and/or password. This leads to a visible menu entry "Users and their permissions" which - when clicked - shows an access denied page...

        Anyway, got it working now so I'm almost happy again smiley
          • 3749
          • 24,544 Posts
          Right. I was trying to think of the other possible permission involved (view_user) when I posted, but could only remember class_map.

          I'm glad you got it worked out. smiley
            Did I help you? Buy me a beer
            Get my Book: MODX:The Official Guide
            MODX info for everyone: http://bobsguides.com/modx.html
            My MODX Extras
            Bob's Guides is now hosted at A2 MODX Hosting