only an admin can modify the content of these presentation pages Topic is solved

[RvJoom]

Hello
I have several groups of administrators to manage their article category.
Today, all admins can modify all the content.
Here is my group tree
Registered
|- author
|-- editor
|--- members managers all organizations
|---- admin member site manager (including me) !!
|---- member manager organization 1


There is only one admin who must be able to modify certain presentation pages that are in visible access for everyone.
What trick so that only an admin can modify the content of these presentation pages?
regards

[Webdongle]

See viewtopic.php?f=839&t=1011667#p3729882 it should help you with your ACL structure

[RvJoom]

Hi
Thank you for answering me, I read the thread
I don't know understood maybe my bad English?
I have already created these new groups that can edit articles in front-end.
a/ should we recreate a new admin group of their article categories ? and if so under which tree structure?
b/ OR is it "enough" to go further in the configuration of their group?
Regards

[Webdongle]

Tree should be:

Registered
|-Member organization 1
|-- Author organization 1 (add Create and Edit Own, allowed)
|--- Editor organization 1 (add Edit allowed)
|---- Publisher organization 1 (add Edit State allowed)
|-Member organization 2 (this has Registered as Parent like Member organization 1)
|-- Author organization 2 (add Create and Edit Own, allowed)
|--- Editor organization 2 (add Edit allowed)
|---- Publisher organization 2 (add Edit State allowed)


Create
Access level organization 1 (select all organisation 1 User Groups and Super Admin)
Access level organization 2 (select all organisation 2 User Groups and Super Admin)

[RvJoom]

Hello
I thought I understood the ACLs management and in particular your proposal.
Unfortunately an article that should be displayed in the menu item [organization] which itself displays all the articles in the category [organization] is not displayed, nor is the menu link.
I have an article written by an author that should be seen and edited by an orga1gest manager who has the rights to publish all the articles of the members of the organization1

Groupe acces

gr-acces.png

Groupe grant

gr-grant.png

Art. catergory

art-cat.png

article author

art.png

members

members.png

[RvJoom]

menu

menu.png

user group

Capture d’écran du 2024-09-09 19-02-36.png

[Webdongle]

Users >>> Access >>> orga 1 ... select Ecrit orga 1, Edite orga 1 and Publie org 1.
That will allow users in Ecrit orga 1, Edite orga 1 and Publie org 1 User Groups to see Menus etc. that are set to org 1 Access level.

[RvJoom]

Hi again
Sorry, maybe I didn't understand but I still don't see my [Organizations] menu item when I log in.
I checked as the access level =Orga1 access, see image:

Capture d’écran du 2024-09-10 10-11-47.png

Do I have to do something else? I'm lost!

[Webdongle]

If you log in as Super User then you will not see it.

https://docs.joomla.org/J3.x:Access_Con ... t_Tutorial (applies to J5 as well)

Separate ACL for Viewing and Doing

[RvJoom]

Hi
Thanks
I solved the view on the menu by putting a group gathering all the groups. A little complex for me.
Each group now sees in this menu, the articles only linked to its group.
However this did not solve the problem or the members of the group "Gest. Orga 1" have the authorization to "modify" all the elements including unfortunately the public articles of the site like the home page !!

Capture d’écran du 2024-09-11 09-49-11.png

[Webdongle]

Set Permissions for Gest. Orga 1 per category not Global

In Global
Membres (toute) ... Do not add Permissions
Membres Orga 1 ... Membres (toute) as Parent (set Site Login Allowed)
Ecrit Orga 1 ... Membres Orga 1as Parent (it inherits Membres Orga Permissions) Do not add Permissions
Gest. Orga 1... Ecrit Orga 1as Parent (it inherits Ecrit Orga Permissions) Do not add Permissions

In Category Orga 1
|- Membres (toute) ... Do not add Permissions
|- Membres Orga 1 ... Do not add Permissions
|-- Ecrit Orga 1 (add Create and Edit Own, allowed)
|--- Gest. Orga 1 (add Edit allowed)
|---- Publisher organization 1 (add Edit State allowed)

[RvJoom]

Hi again
Thanks for the follow-up. Sorry but my bad English does not allow me to understand well :-(
the images are better.
For "In global" is it in ??

Capture d’écran du 2024-09-11 13-22-04.png

For "In Category Orga 1", I had already put that. Something to modify?

Capture d’écran du 2024-09-11 13-22-49.png

Capture d’écran du 2024-09-11 13-23-19.png

Capture d’écran du 2024-09-11 13-23-49.png

Capture d’écran du 2024-09-11 13-24-33.png

[Webdongle]

user groups 01.jpg

global permissions 01.jpg

global permissions 02.jpg

global permissions 03.jpg

global permissions 04.jpg

[Webdongle]

access 01.jpg

access 02.jpg

Selected can see Articles etc. that are Access level Orga 1

[Webdongle]

To Allow edit etc Permissions for Orga 1 only

category permissions 01.jpg

category permissions 02.jpg

category permissions 03.jpg

category permissions 04.jpg

[RvJoom]

Hi
Great thanks :-)
Without you, I wouldn't have made it.
ACLs are very powerful but a bit complex.

It works ... almost perfectly. I put below a troubling problem (see bug?) and another problem maybe even a bit more complex. If necessary, I can put in a new discussion thread

Here is my memo, if it can help if it is correct!?
In case of doubt, I put a photo (easier than writing).
* Global configuration - rights
Do not put any rights except [Site Connection] to the parent group "All organizations" and all its children
* Groups
Under the parent group "All organizations", put a group "member organization 1" with these child groups with higher rights like [author], ...
* Access
Each access level is named like the group to which it corresponds e.g.: "Access organization 2 manager" has ("Manager organization 2"
* Members
Each member receives the level [registered] then the group of which he is part e.g.: "member organization 1"
* Article category
The category "All organizations" receives (Access all organizations)
Each article subcategory receives its corresponding access. E.g.: "Organization 1" receives access (Access organization 1 members)
* Articles - parameters
Do not put any rights to the parent group "All organizations" and all its children EXCEPT
if you have custom fields, allow groups type [author] [to [Edit custom field values]
* Articles
Each article receives the access right corresponding to its group; Ex.: "article A" with access rights (Access organization 1 members)
* Articles - fields
They must have access rights to be viewed
* Menus
a public menu has a public access right
a registered menu has a "registered members" access right
a "general" organization menu has an access right (Access organizations all)

[RvJoom]

I created an article on the administration side, as superadmin,
put it in the article category "orga 2" reserved for members "orga 2"
as "author member orga 2" with author rights reserved for members "orga 2"

When I log in as "author member orga 2", I can see the article but I can't modify it!!
I did it again 2 times without success.
[I had found a problem, perhaps similar, with a custom field that I duplicated in the administration and then I had changed the rights (memorization bug!?)]

I did all the other tests successfully with different organization accounts (or not) and the viewing and editing works correctly including the modification of "presentation orga 1"

Capture d’écran du 2024-09-12 11-28-34.png

[RvJoom]

B/ ‘Private note between you and us’ field (super-admin) which
1/ must be writable like the other fields for the member who is writing/editing his/her article OR presentation (users)
2/ must only be visible to super admin and this member. No other person should see this field

If it's too complicated, I'll give up and advise you to contact us by email!

[RvJoom]

C/ deleting items on the front end
The manager of each group has deletion rights for the items in their group. But on the front end, I don't see a button for deleting this article?
Again, less important

[Webdongle]

For Category Orga 1 Permissions you can Allow Delete for User Group Gest. Orga 1

[RvJoom]

For Category Orga 1 Permissions you can Allow Delete for User Group Gest. Orga 1

If your answer is for C/ I had already done that ... without success.
I realize that superadmin can't do it either in front-end (seen on other sites). Maybe not possible after all!?

Capture d’écran du 2024-09-12 13-28-51.png

Another opinion on the other 2 questions. The first one being the most important, otherwise I'll open a new thread.

[Webdongle]

Yes thinking it over it is done in Admin.

You can give User Group Gest. Orga 1 Global Permission Administrator Login
Then Articles >>> Options >>> Permissions ... User Group Gest. Orga 1 ... Access Administration Interface Allow

User Group Gest. Orga 1 could then login Administrator and see Categories and Articles

[RvJoom]

for c/ ?
ok thanks again

I've still got the story of the writing field between the author and the super-admin, but that's getting a bit too complex.

[Webdongle]

I think you have worked things out

User Groups inherit Permissions from their Parent.

Global Permissions cover everything. So Global low Permissions then add Permissions per Category

[gws]

I think you have earned your pint for that effort Webdongle.

[Webdongle]

I think you have earned your pint for that effort Webdongle.

Just 'paying forward'. Besides which the OP put effort in and did the hard work learning from experimenting from what I posted.