Giving a User Manager Access

The Problem¶

You want a User to have manager editing access, but not have all the Permissions of an Administrator user. This tutorial, partially written by BobRay, will help you through that.

The Solution¶

1. In Access Controls ->Roles, create a new role (lets call it "Editor") with an authority of 10.
2. In Settings -> Access Control Lists -> Access Policies, duplicate the administrator policy and rename it to whatever you want, for our example we'll use "AdminLite".
3. Edit the AdminLite Policy to use whatever Permissions you want the User to have.
4. In Settings -> Access Control Lists -> User Groups, right click on the "Administrator" group and select "Update User Group."
5. On the Permissions -> Context Access tab, add two new entries to the grid:
   1. Context: 'mgr' Minimum Role: 'Editor', Access Policy 'AdminLite'
   2. Context: 'web' Minimum Role: 'Editor', Access Policy 'Load, List and View'
6. In Manage -> Users, create the new user, or edit existing, and via the Access Permissions tab, assign them to the Administrator group with a role of Editor.
7. Click on Security -> Flush Sessions and re-login.

Publishing in the manager¶

If the user can edit resources but cannot publish (Published checkbox snaps back, no publish dates, no Publish in the tree menu):

• Stock Content Editor has no publish_document / unpublish_document.
• Those keys must appear on a Context Access ACL for mgr, not only on web or another frontend context.
• Resource Policy permissions publish / unpublish do not drive the current manager publish UI.

More detail: ACLs: Manager publishing and multiple groups.

See Also¶

1. Giving a User Manager Access
2. Making Member-Only Pages
3. Creating a Second Super Admin User
4. Restricting an Element from Users
5. More on the Anonymous User Group