Dear list

We used to be able to hide content in the website tree (or dms tree) in AdminCentral from certain users by simply configuring the ACL. We usually did this like so:

        - Website
                - Read only | Selected and sub pages | /$
                - Read only | Selected and sub pages | /tmp/fckeditor
                - Read only | Selected and sub pages | /docroot
                - Read only | Selected and sub pages | /.resources
                - Read/Write | Selected and sub pages | 
/path/to/root/page/for/user

This does not seem to work anymore. In fact, not only hiding content from the user does not work anymore, but even controlling write access does not work. I've now set up a simple ACL for the role "limited" in a plain vanilla Mag 3.5.2 that looks like this:

        - Website
                - Read/Write | Selected and sub pages | /mailform

When I logged in with a user that only had this "limited" role, still all pages were shown in AdminCentral and I was even able to edit pages that were not under /mailform. So I added
        
                - Deny access | Sub pages | /

to the role: Still absolutely no limitations! Is the ACL stuff not working for the trees in AdminCentral anymore - or am I doing something terribly wrong?

Thanks for the help!

Regards,
Will



----------------------------------------------------------------
for list details see
http://documentation.magnolia.info/docs/en/editor/stayupdated.html
----------------------------------------------------------------

Reply via email to