Manager customization & access policies

Hi all,

I'm trying to adjust manager forms for specific manager user group. I want my managers to NOT be able to mess up with the system too much. I created new profile and sets for creating and updating resources. So far so good

Issue I'm having is that my manager (assigned to my user group based on Content Manager) doesn't have access to "Resource groups" tab when editing/creating documents. "Resource groups" tab is where they can assign documents to groups that I use to control access to documents on front-end. See screenshot for details please if it doesn't sound too clear.

Which access policies are required for manager to see and manage content in "Resource groups" tab?

The default permission for that is access_permissions. Unfortunately, giving them that would allow them to make themselves sudo users or take away your rights.

You could try changing the permission to some other permission that they already have in their mgr Context Access Policy, or add a custom permission to the policy. I'm not sure it would work, since they might get blocked further along without access_permission policy, but it's worth a try.

To change it:

Go to System (gear icon) -> Menus
Click on the "Content" folder to open it
Right-click on the Resource entry and select "Update Menu"
At the bottom left, change access_permissions to something else
Click on the Save button

Let us know if it works.

I don't think it requires any security-type permissions, looking at the code for saving resources and their groups, it doesn't check for any permissions or policy settings at all.

I think access_permissions is necessary to see the menu item and the tab on the Create/Edit Resource panel, so the code doesn't need to make a check.

If I'm right, my solution probably won't expose the tab, but it will allow you to manage resource groups in Content -> Resource Groups.