I created a copy of a resource policy and removed the publish/ unpublish rights. When I used it on a Resource ACL for a particular group, it still lists the right to publish and unpublish. What's going on?
-
☆ A M B ☆
- 1,780 Posts
Can you post your settings for the resource group, the policies and the ACLs that affect it? If you just jumped into permissions, chances are something is not correct. Best practice is to spend some time reading up and make sure to start at the beginning and build your permission system without leaving out any of the steps to get where you want to be. i.e. changing a policy for a resource group likely depends on what other policies and contexts are also set for that resource group, or even the users and their roles.
See:
http://bobsguides.com/revolution-permissions.html (click the MODX menu item, there's more to read on this)
http://rtfm.modx.com/revolution/2.x/administering-your-site/security
http://bmv-interactive.com/home/modx-acl-tutorial.html
Here's a couple others that look good that I found while looking for the last link above.
http://onsitenow.co.uk/modx/modx-security-access-control-lists/
https://blog.law.gmu.edu/webservices/2014/07/23/modx-permissions-and-users/
