Setting up the right permissions to our customer
Permalink
Hi fellow Concretizers!
Me and the rest of our team have recently build our very first page in Concrete5 (http://www.websightdemo.dk/hadruplund... ) Yay! - and are very pleased so far. It's easy to add content, making layouts within the main area and adding pages is a breeze aswell.
It was a real joy when I learned how to use Page Types too.
However, I have problems now setting up the permissions to my customer (I turned Advanced Permissions on as soon as I had done the install of c5, so this should not be a problem).
First I want the customer to be able to add content blocks (and images) in the mainarea aswell as editing them, but not be able to access the menu and header. I achieved this by making a user, which I put in a group called "Hadruplund". I choose "Set permissions" on every page and added this group, granted access to "Read", "Versions", "Write" and "Approve".
After this I entered the site in edit mode, and chose all the blocks and content which they should NOT be able to edit and gave the "Hadruplund" group access only to read. Leaving only the contentblock in main and "add to mainarea" editable.
Is that the proper way of doing it, or is there a better way?
I do not quite understand the "By Page Type Defaults" option. That only works when I make NEW pages from a certain Page Type which I have assigned particular permissions to or am I mistaken?
Now for the real challenge!
I have two features that my customer needs to have access to.
First I use the add-on EasyNews which shows up in the Dashboard, where I can post and edit news.
I have made a new Page Type for this, and everytime I post a news entry EasyNews uses this page type and places the page underneath my "News site" which contains a list of all the news published.
When I login with the "Hadruplund" user I need to have access to let EasyNews add a page of that type, else they can not post news themeselves.
How do I do that?
The other thing challenge is a gallery. I have made a gallery with a list of the galleries added below that page.
I have created a page type with the right block (Simple Image Gallery) and set it up, so that when they add a page beneath "gallery" they only have to go in edit mode and choose the right fileset (so they also need to have access to the file manager!) and then click "Publish"! And there goes a new fine gallery.
Is there any way doing this without granting them access to the whole Dashboard?
I have used the "View System Pages" and set up the user the following way (which I found here on the forums)
(user Osu):
"I set the Dashboard to manual so that all subpages below this inherit permissions from the Dashboard page instead of Home (which I think was the problem).
Then I changed permissions to manual on pages like Reports, Users & Groups etc. and removed both the Authors and Publishers groups because I didn't want these users to see those pages.
"
It does work on the EasyNews dashboard page (it is viewable) BUT when trying to post a news entry the following displays:
The following errors occured when attempting to process your request:
- You do not have permission to add a page of that type to that area of the site.
Also the Sitemap and File manager is viewable but when clicked upon it brings you directly to the login-screen of Concrete5.
How do I grant them access to the right things, so they can post news and gallery pages?
ANY help on this would be very very much appreciated, I really hope Concrete5 is able to fulfill these tasks!
Best regards, and I am looking forward to hear from anyone with experience in this!
Mikas Eskesen
Me and the rest of our team have recently build our very first page in Concrete5 (http://www.websightdemo.dk/hadruplund... ) Yay! - and are very pleased so far. It's easy to add content, making layouts within the main area and adding pages is a breeze aswell.
It was a real joy when I learned how to use Page Types too.
However, I have problems now setting up the permissions to my customer (I turned Advanced Permissions on as soon as I had done the install of c5, so this should not be a problem).
First I want the customer to be able to add content blocks (and images) in the mainarea aswell as editing them, but not be able to access the menu and header. I achieved this by making a user, which I put in a group called "Hadruplund". I choose "Set permissions" on every page and added this group, granted access to "Read", "Versions", "Write" and "Approve".
After this I entered the site in edit mode, and chose all the blocks and content which they should NOT be able to edit and gave the "Hadruplund" group access only to read. Leaving only the contentblock in main and "add to mainarea" editable.
Is that the proper way of doing it, or is there a better way?
I do not quite understand the "By Page Type Defaults" option. That only works when I make NEW pages from a certain Page Type which I have assigned particular permissions to or am I mistaken?
Now for the real challenge!
I have two features that my customer needs to have access to.
First I use the add-on EasyNews which shows up in the Dashboard, where I can post and edit news.
I have made a new Page Type for this, and everytime I post a news entry EasyNews uses this page type and places the page underneath my "News site" which contains a list of all the news published.
When I login with the "Hadruplund" user I need to have access to let EasyNews add a page of that type, else they can not post news themeselves.
How do I do that?
The other thing challenge is a gallery. I have made a gallery with a list of the galleries added below that page.
I have created a page type with the right block (Simple Image Gallery) and set it up, so that when they add a page beneath "gallery" they only have to go in edit mode and choose the right fileset (so they also need to have access to the file manager!) and then click "Publish"! And there goes a new fine gallery.
Is there any way doing this without granting them access to the whole Dashboard?
I have used the "View System Pages" and set up the user the following way (which I found here on the forums)
(user Osu):
"I set the Dashboard to manual so that all subpages below this inherit permissions from the Dashboard page instead of Home (which I think was the problem).
Then I changed permissions to manual on pages like Reports, Users & Groups etc. and removed both the Authors and Publishers groups because I didn't want these users to see those pages.
"
It does work on the EasyNews dashboard page (it is viewable) BUT when trying to post a news entry the following displays:
The following errors occured when attempting to process your request:
- You do not have permission to add a page of that type to that area of the site.
Also the Sitemap and File manager is viewable but when clicked upon it brings you directly to the login-screen of Concrete5.
How do I grant them access to the right things, so they can post news and gallery pages?
ANY help on this would be very very much appreciated, I really hope Concrete5 is able to fulfill these tasks!
Best regards, and I am looking forward to hear from anyone with experience in this!
Mikas Eskesen
Hi Sean
Thank you so much for the answer! I did wonder if anyone had the energy to read my long post.. :)
I will try it out and get back here!
Best
Mikas
Thank you so much for the answer! I did wonder if anyone had the energy to read my long post.. :)
I will try it out and get back here!
Best
Mikas
This was an amazing help Sean.
I had not even seen the "access" pages under Sitemap and File Manager.
Also it turned out that giving the group access to add that specific page type which EasyNews uses, was exactly the way to go. Same with the gallery pages.. :-)
Now they can add only those pages.. and when they try to add pages other places they just get access denied as they should.
Now I just need to set up each blocks on all the sites.. phew.
Thank you so much for your help again! There should be done some tutorial on this actually. Maybe I will take a lot of screenshots and make a guide..
Best
Mikas
I had not even seen the "access" pages under Sitemap and File Manager.
Also it turned out that giving the group access to add that specific page type which EasyNews uses, was exactly the way to go. Same with the gallery pages.. :-)
Now they can add only those pages.. and when they try to add pages other places they just get access denied as they should.
Now I just need to set up each blocks on all the sites.. phew.
Thank you so much for your help again! There should be done some tutorial on this actually. Maybe I will take a lot of screenshots and make a guide..
Best
Mikas
Something I have wondered though:
When making changes in Permissions in the "Default" of a specific Page Type, does this only apply to pages added afterwards, or ALL pages build on that page type??
Best
Mikas
When making changes in Permissions in the "Default" of a specific Page Type, does this only apply to pages added afterwards, or ALL pages build on that page type??
Best
Mikas
They apply to all pages of that type, one addon that you may also like is Jordans force single level which would prevent users adding pages below the news pages. But still allow the add page option
It seems like you pretty much have this sorted and are on the right track, Adding pages manually to the dashboard will allow the users to see those pages when viewing the page you may also need to give them access to access the file manager and sitemap,
/index.php/dashboard/sitemap/access/
/index.php/dashboard/files/access/
There are also some more option in the sitewide settings,
/index.php/dashboard/settings/access_task_permissions/
Finally whilst you may allow a user to add a page I often find the granularity bite me in the behind here,
On a custom page, you set the permissions to manual,
Bring up the advance permissions, then under Currently Viewing select "Sub-Page Permissions" put a tick in the boxes of the page types you would like to allow the user to add.
If the subpage inherits permissions from the page type. Then you would need to edit those permissions on the page type in the dashboard, this is good I find for the news pages and other pages they will add a page and the permissions are already setup for them.
I have had this catch me out on many occasions and that is the use of the page_type permissions and inheriting permissions. So I may be wrong on this :) hopefully I have suggested the working way.