I need help! I can’t understand the ACL in MODx well.
I have several sites (contexts) in my college under the same Modx instance. Now I have a news Collection resource under each site. I want each site has its editors to write (but not to publish) news within the news Collection. How can I implement it? Can anyone give me an example?
Let’s say, there is a role called “editor(200)”, I need the role can just edit the news within a Collection resource which under the context of “hr_department”. What should I do ? (There must be many many combination of the choices, I tried some, all is failed! Some combination will cause endless redirection after an editor logged in )
context: mgr
access policy: ?
minimum role: ?
context: web
access policy: ?
minimum role: ?
context: hr_department
access policy: ?
minimum role: ?
resource group: news (I have added the news Collection resource to it, and the resource group has been added to the user group)
access policy: ?
context: ?
Thanks in advance!
See if this helps:
http://bobsguides.com/controlling-access-to-resources-in-the-manager.html
Also, for an understanding of how it all works, this is my best resource (it runs about 50 minutes):
http://vimeo.com/54360208
Thank you! Bob.
Your site has been one of my favorite sites for a long time. You know what? My wife even made bread for me following your recipe from your site:) There are great tutorials there.
Thank you for the great work.
I followed your tutorial in the page you gave me:
...
7. Use the following values in the ACL entry:
Resource Group: Editables
Context: mgr
Minimum Role: Editor
Policy: EditorResource
8. Click on the "Save" button in the dialog
9. Add another ACL entry using the following values:
Resource Group: Editables
Context: mgr
Minimum Role: admin Super User
Policy: Resource
10. Click on the "Save" button in the dialog
...
When I do the step 10, there is an error message: An ACL for that Resource Group already exists!
Does it mean for a user group, a resource can just be added once?
Thanks again!
Thanks for the kind words.
I've seen that error myself lately. TBH, I don't understand it either. There's no reason I know of that you shouldn't be able to have multiple ACL entries for the same Resource Group. I was able to get around it by deleting some existing ACL entries that I didn't need, but it's still a mystery to me.
Maybe someone can enlighten us both.
