We launched new forums in March 2019—join us there. In a hurry for help with your website? Get Help Now!
    • 23515
    • 40 Posts
    Ok I thought this looked pretty straightforward but for some reason can’t get it to work.

    What I want to do is to have a manager user, that can only edit or create within a certain document and its children. This is the process I took:

    Created manager.
    Created user group under manager permissions.
    Added the manager to the user group.
    Created a document group.
    Added the document to that document group.
    Linked the user group to the document group.

    The lock appears next to the document but anyone can edit it, and the user that should have restricted permissions has full access too, what am I missing?
    The documentation doesn’t mention anything else.

    Cheers

      • 4041
      • 788 Posts
      Did you actually go through the whole edit process, it should have told you when you clicked the Save button that you did not have the required permissions.
        xforum
        http://frsbuilders.net (under construction) forum for evolution
      • I do believe that anyone with the full Administrator role can edit all documents. Try creating another role and assigning your new user to that role.
          Studying MODX in the desert - http://sottwell.com
          Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
          Join the Slack Community - http://modx.org
          • 23515
          • 40 Posts
          Thanks for the replies.

          I’ve been thinking about the manager users the wrong way, it all works fine but not in the way I was expecting:

          I want to lock a manager user into a set of documents, rather than lock other users out. In this case I want a manager user that can only edit profile pages, so they login, and can only see/edit the Profiles document and its children. I’m not sure why I was expecting it to behave in the opposite way to web users (maybe because I was trying to figure it out on a Monday morning). So yeah, I guess the only way to do this would be to put every other document into a group, and build up permissions that way?

          Thanks again.
            • 5628
            • 44 Posts
            Sorry for resurrecting this topic but it seems to match a problem I have been having in understanding user permissions.
            I have a group of documents (doc group A) and I want to restrict making updates to this group to a particular - manager - user (user 1).
            I also want to prevent that user (user 1) from making updates to any other document groups (eg. doc group B).
            However, when implemented and I log in to the back-end as user 1 I can edit any documents I want, even if I explicitly stick them in another group that this user doesn’t have permission for? Any ideas/pointers?

            Cole

            #####
            MODx v0.9.6/rev 2767
            PHP 5.1.4/Apache 2.2.2 (on Windows)
            MySQL 5.0.21



            • Manager user #1 is the Admin user. You cannot restrict his access. Create another user to work as, and give him the role and access you want.
                Studying MODX in the desert - http://sottwell.com
                Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
                Join the Slack Community - http://modx.org
                • 5628
                • 44 Posts
                Quote from: sottwell at Jul 29, 2008, 02:33 PM

                Manager user #1 is the Admin user. You cannot restrict his access. Create another user to work as, and give him the role and access you want.

                Thanks
                I had created an additional (manager) user with distinct roles and responsibilites, belonging to a different user group and tied to a specifically defined group of documents.
                When logged in, however, this extra user can edit any document in the tree, even those only accessible by another document group.
                Any ideas anyone?

                Cole
                  • 12379
                  • 460 Posts
                  I’ve got the same problem on two new sites too.

                  I created a user called "Guest" and assigned them the role of Editor, being able to create, edit and delete documents. I then proceeded to assign the user "Guest" to the user group "Advertising & Marketing". This user group has access to the document group "Marketing".

                  I’ve assigned to a "Test" page the privileges "Marketing", but when I log in as Guest I can still edit any page on the web site! Go figure...

                  BTW i’ve got "Use access permissions" ticked in Tools>Configuration>User...
                    Mostly harmless.
                  • And have you assigned all of the other pages to some other document group?
                      Studying MODX in the desert - http://sottwell.com
                      Tips and Tricks from the MODX Forums and Slack Channels - http://modxcookbook.com
                      Join the Slack Community - http://modx.org
                      • 12379
                      • 460 Posts
                      um, no, but thank you.
                        Mostly harmless.