Security / ACL's - A better understanding - My Forums

Re: Security / ACL's - A better understanding

rethrash — May 09, 2011, 08:15 AM

No barrd, please keep them coming! ACLs are one of the most confusing aspects for users of Revo, and we definitely need improved documentation in RTFM.

Re: Security / ACL's - A better understanding

barrd — May 09, 2011, 03:28 AM

Thank you BobRay!

Heres another quick heads up re management back end. I’ll add things as I find them

Manager -> Security -> Access Controls -> Policy Templates (tab) >> Right-Click an entry -> Help!

Results in a 404.

Fixed: by splittingred http://rtfm.modx.com/display/revolution20/PolicyTemplates

~~Hope I’m not annoying anyone with my comments.~~ Apparently, I’m not. This is good.
~Dave

Re: Security / ACL's - A better understanding

BobRay — May 08, 2011, 06:10 PM

Good catch. That’s been moved from a System Setting to a permission (where it belongs).

I thought I had updated that at Bob’s guides, but apparently not.

[update] The rtfm reference has been updated. I removed that paragraph at Bob’s Guides because the permission is granted by default. Thanks again for the feedback!

Security / ACL's - A better understanding

barrd — May 08, 2011, 06:52 AM

Greetings,

I am attempting to understand MODx ACLs from the ground up. I have started this thread to try and create a map for users (such as myself) to get things up and running and attempt to possibly point out some inconsistencies in documentation. I would like to point out again this is not meant as any offence at all to any person, and/or documentation, official or otherwise - I love all you guys

This is post one, point one...

I like many others have been reading through bobsguide to permissions, link in Referenced URLs.

Access Control Lists
Note: Before messing with Permissions, check the setting of the allow_root System Setting in System | System Settings. It determines whether users can create Documents in the site root and it overrides any other security settings. You can spend a lot of time trying to figure out why your users can’t create documents if allow_root is set to "No."

allow_root

Does not exist...

instead...

udperms_allowroot

Seems to have taken its place, however... according to the documentation (link in Ref’d URLs) it has been deprecated and now is covered by

new_document_in_root

~~I shall edit this post when I have uncovered what exactly~~ "new_document_in_root" is, how to access it etc (via, Administrator Policy)...
Security->Access Controls->AdministratorTemplate

I’m doing this in baby steps, please bear with me.
~Dave

--------
Reference URLs;
http://bobsguides.com/revolution-permissions.html
http://rtfm.modx.com/display/revolution20/udperms_allowroot
http://modxcms.com/forums/index.php/topic,64266.0.html