[permissions] How to disable editing of a container but children editable?! - My Forums

Re: [permissions] How to disable editing of a container but children editable?!

BobRay — Nov 15, 2015, 02:36 PM

Here are a couple of things that might help.

This is a 50 minute video of me explaining how the security permissions system works: https://vimeo.com/54360208.

This is a whole lot of information about the details (click on MODX -> MODX Security Permissions): http://bobsguides.com/.

Re: [permissions] How to disable editing of a container but children editable?!

romainfallet — Nov 15, 2015, 06:13 AM

I am sorry to bother you with an already answered question, I am just lost between Resources Group, Users Group, Access policies, Access policies template, Roles, that fact that I can't edit Resources Group after its creation…

I don't know neither why the list of Access policies is different between here and here :

Also, by default, I only have two roles : Member and Super User. I don't have "Content Editor" role, or we don't talk about the same thing.

Re: [permissions] How to disable editing of a container but children editable?!

BobRay — Nov 14, 2015, 12:41 AM

It should definitely work in 2.4.2, though I haven't tested it and don't have time to right now. I very much doubt that the permissions code has changed.

Be sure to flush both permissions and sessions before testing any changes, and never test in the same browser where you're logged into the Manager (even in a separate tab).

Re: [permissions] How to disable editing of a container but children editable?!

romainfallet — Nov 13, 2015, 02:47 PM

Is this still works on 2.4.2 ? I can't make it work, maybe I'm not good enough with access policies... But the access policies changed since this post, am I wrong ?
I wrote a little plugin that prevent accessing containers by simply reload the manager dashboard when we try to edit a container.

Here is the plugin code, fired on "OnManagerPageBeforeRender" event :

scriptProperties['id'];
$action = $controller->scriptProperties['a'];
$modx = $controller->modx;
$doc = $modx->getObject('modResource', $id);

if ($action === 'resource/update' && $doc->get('isfolder') === true) {
    $url = MODX_MANAGER_URL;
    $modx->sendRedirect($url);
}

unset($id, $action, $modx, $doc, $url);

But it's not really the way I need this to work, I just don't want that nothing happens when I click on a resource container in the resources tree.

Re: [permissions] How to disable editing of a container but children editable?!

BobRay — Feb 01, 2013, 06:26 PM

I'm glad it worked for you. Thanks for reporting back.

Re: [permissions] How to disable editing of a container but children editable?!

jambek2003 — Feb 01, 2013, 03:56 AM

Quote from: BobRay at Feb 01, 2013, 03:31 AM

You need to put the container resource in another Resource Group (and remove it from the group with the editable resources).

Leave what you have for the Editable resources.

Connect the container's Resource Group to the Administrator group with a Resource Group Access ACL entry :

context: mgr
policy: Administrator
minimum role: Super User

That will hide it. To unhide it, but not allow editing, connect the container's resource Group to the Content Editors Group with another Resource Group Access ACL entry:

context: mgr
policy: Load, List, and View
minimum role: Content Editor

The container will be visible but not editable and the children should show up.

BobRay your my lifesaver; or better said your our website-saver. Our Digital-illiterates @work can't f~%k up anymore ;-) Look but no touch......hih.

Re: [permissions] How to disable editing of a container but children editable?!

sottwell — Jan 31, 2013, 11:02 PM

Evo had a system setting to allow all resources to be viewed in the Tree, but protected ones still couldn't be edited. I don't see anything like that in Revo, unless I just missed it.

Re: [permissions] How to disable editing of a container but children editable?!

BobRay — Jan 31, 2013, 09:31 PM

You need to put the container resource in another Resource Group (and remove it from the group with the editable resources).

Leave what you have for the Editable resources.

Connect the container's Resource Group to the Administrator group with a Resource Group Access ACL entry :

context: mgr
policy: Administrator
minimum role: Super User

That will hide it. To unhide it, but not allow editing, connect the container's resource Group to the Content Editors Group with another Resource Group Access ACL entry:

context: mgr
policy: Load, List, and View
minimum role: Content Editor

The container will be visible but not editable and the children should show up.

Re: [permissions] How to disable editing of a container but children editable?!

jambek2003 — Jan 31, 2013, 01:12 AM

Okay It's not there how do I solve my problem? Resource has to be in Resource Group otherwise children are not visible but excluding it from editing in any way by 'Content Editors' Group.

Re: [permissions] How to disable editing of a container but children editable?!

BobRay — Jan 30, 2013, 02:56 PM

I could swear I've seen it, but then I'm getting pretty senile.