We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 24629
    • 370 Posts
    Hi
    I'm running REVO 2.3.2-pl . With an custom Editors ACL.
    Upon saving a resource the editor gets an error Code: 200 OK {"success":false,"message":"Permission denied!","total":0,"data":[],"object":[]} ?
    After inspecting the forums i found several entries wdealing with this error. None of the suggested remedies in those posts work
    My Editor policy has class_map permission and view_user permission
    Checking the network traffic in Chrome Devtools doesn't make it any clearer since almost all connections go through connectors/index.php
    so, yes, 1 of those connections returns the Code: 200 error but i cant tell where that came from.

    How can i figure out which permission is missing?

    RDG
      • 44580
      • 189 Posts
      I recently had exactly the same issue and could not figure out which permission(s) I needed. So I'm afraid I used a brute force approach to get around it. In my case, I wanted the editor to manage Users, but do nothing else (no files, no resources) other than some CMPs. So I went through and turned on nearly all the permissions to add, view, delete knowing that they would not be accessible once the menu items were removed.

      This has worked for me but I would honestly hesitate to recommend it unless you get desperate. I ended up with the editor having 107 of the 172 permissions. I'm sure I don't need that many but did not want to spend the hours doing it one at a time. Plus I trust the editor not to fiddle.

      It would be nice to have a definitive method to avoid this.
        • 3749
        • 24,544 Posts
        If the resource is protected via a Resource Group Access ACL entry, the first thing to try is to assign the Resource policy instead of your custom policy and see if that fixes the problem. If so, it's a missing permission -- if not, it's not. Be sure to flush both permissions and sessions before testing.

        If you're sure the resource is not protected, see if assigning the Administrator policy in the user's Context Access ACL entry solves it. Again -- if so, it's a permission problem -- if not, it's not.

        If either of the above solves the problem, you can start unchecking permissions (and flushing again) to see which one it is.
          Did I help you? Buy me a beer
          Get my Book: MODX:The Official Guide
          MODX info for everyone: http://bobsguides.com/modx.html
          My MODX Extras
          Bob's Guides is now hosted at A2 MODX Hosting