We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 36760
    • 136 Posts
    I'm looking to have a restricted admin account that has certain top menu items hidden in the manager. I've found this guide to use as a backup method: http://bobsguides.com/blog.html/2013/10/24/hiding-modx-top-menu-items-from-some-users/. Right now, I'm mostly curious why the method below isn't working.

    The user I want restricted is in a User Group called Restricted Administrator. Its permissions are mgr - Super User 0 - Restricted Administrator

    The Restricted Administrator Access Policy uses the AdministratorTemplate. As a test, I unchecked the "components" item from the policy. However, the account in the group still has access to the Extras > Installer menu. I've tried flushing permissions for the account and force logging out all users.

    I feel like I'm missing something simple, or am I completely misunderstanding the policy permissions?

    I appreciate any help!

    This question has been answered by firebot6. See the first response.

    • I'm pretty sure that's the "packages" permission, according to the Permission setting of the menu item itself. Make sure that's not checked in the Policy your new group is using.
        Studying MODX in the desert - http://sottwell.com
        Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
        Join the Slack Community - http://modx.org
      • discuss.answer
        • 36760
        • 136 Posts
        You were correct about the packages permission, the components permission hides the entire Extras menu, not just the Installer. That wasn't the ultimate problem, unfortunately.

        I did manage to solve the problem, though. I was trying to apply these restricted permissions to the default admin account. I created a third account and put it in my Restricted Admin group and all the menu items disappeared as expected. I'm guessing that being unable to restrict the default admin account is just a fail-safe so you can't accidentally lock yourself out of things.

        Also in the course of my testing, I created a new Role called Restricted Administrator and gave it an Authority of 1. I don't know if this helped fix the issue along with the above, but I wanted to put it here in case someone else comes across this.
        • The default admin user is also a "sudo" user. https://www.markhamstra.com/modx/2012/04/sudo-users-new-modx-2.2.1/
            Studying MODX in the desert - http://sottwell.com
            Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
            Join the Slack Community - http://modx.org
            • 50655
            • 2 Posts
            How can I hide menu item for Administrator? I created a custom menu item named "Editor's Menu", and created a permission for it - "menu_editor". I have two Access Policies: default "Admintrator" and "AdminLite". I checked "menu_editor" item for AdminLite and unchecked for Administrator, but this didn't work. Please help!
              • 3749
              • 24,544 Posts
              It's usually easier to create a separate User Group if you want administrators with limited rights.
                Did I help you? Buy me a beer
                Get my Book: MODX:The Official Guide
                MODX info for everyone: http://bobsguides.com/modx.html
                My MODX Extras
                Bob's Guides is now hosted at A2 MODX Hosting