HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


Need some help on restricting access

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#69849 (In Topic #14806)
Avatar

Community saint

I have a group of vetted contributors who I wish to give access to edit author profile and create & edit blogs. However, I do not want them to have access to any of the other content management tools for creating or editing content. I thought I had this set up correctly with permissions to view (e.g., catalogues (FAQs, Links) but not adding or editing), but when a member of this group goes to, for instance, "Add blog", they can use the breadcrumbs to gain access to add a catalog entry. Worse yet, they can adjust the permissions for these. I am sure I am just not getting something about the security model but how would I accomplish the above (limited access to a few option in Content Management). Are match-keys the answer here or should I be able to set the permissions elsewhere?

I set up a menu block using "if_in_group" to control visibility to the options which works fine.

Thanks for any insight.

Bob
Back to the top
 
Posted
Rating:
#69850
Avatar

Community saint

I believe you can accomplish that with the permission tree editor which goes very in depth with permissions.

adminzone>security>permission tree editor
Back to the top
 
Posted
Rating:
#69851
Avatar

Community saint

Hey Bob,

I assume that when you say group, you mean that you have created a specific group for these vetted contributors. If it is the case, you can use:

Admin Zone > Security > Permissions Tree Editor

To restrict access to specific Modules within the Content Management Zone.

Hoping I understand your question and that this will help.;)

Jean 
Back to the top
 
Posted
Rating:
#69853
Avatar

Community saint

Thanks Brian and Jean.

I thought I had set the permissions for the appropriate groups in the Permissions Tree Editor (yes, I have set up special Usergroups who will have access) but upon checking just now, I don't see the permissions set. I know I had some wonkiness with setting some permissions in 6.1.1 but don't remember the details (another sign it's time to take a walk :)  ). I'll give this a shot and see if I can get the results I want.

Thanks again for your help.

Bob
Back to the top
 
Posted
Rating:
#69856
Avatar

Community saint

I finally got it. I was misunderstanding the "View access" setting which I thought controlled whether or not something is displayed in the front-end. It appears that is not the case.

The only funky thing I have is that if one of my contributors uses the breadcrumbs to go to "Content Management", they will see a "Blogs" button but upon choosing that button they end up at the 'Manage blogs' screen with "What would you like to do next?" and no buttons. This is most likely because these buttons actually exist in the "News" section of Content Management which I have deliberately hidden. Is there some way of allowing them to see "Add blog" and "Edit blog" under Blog Manangement? Right now, you can only choose these options from the side menu block which is workable but not particularly elegant with regard to the user being in the back-end with no options available for blogging.

Any thoughts?

Bob
Back to the top
 
Posted
Rating:
#69875
Avatar

Right I think the confusion here is probably that to disable access to a CMS module you need to change view permissions on the CMS module (e.g. cms_galleries) and not the site module (e.g. galleries).

Regarding blogs, you probably want to restore what news permissions were there before but disable view access to cms_news whilst keeping view access to cms_blogs.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#69896
Avatar

Community saint

Hi, Chris.

Not surprisingly, your suggestion worked perfectly and was obvious in retrospect.

Thanks again for your help.

Bob

Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Contract

Your name:
Your message: