Permission denied on limited access user

Development
1

I have a project with a user group that is only allowed to edit users in the manager and nothing else. When testing this group I discovered that I’m allowed to update all users. However, an error modal shows, which I have pictured below.

Screenshot 2021-02-25 at 09.22.12

Using the network monitor in the inspector I have come to find that the ‘permission denied’ refers to both ‘workspace/namespace/getlist’ and ‘security/user/setting/getList’.

The problem is that the user group can’t be allowed access to system settings and namespaces. Is there a way to get rid of the error, without giving access to settings and namespaces?

I’m using version 2.8.1 of MODX

2

Would it be enough to just hide the System Setting and Namespace menu options? You can do that by taking away the settings permission (be careful not to take it away from yourself).

You can also add a custom permission to any menu item (e.g, settings,my_custom_permission) and granting that permission selectively. That’s done in System -> Menus (right-click on the menu option you want to change).

3

Thank you for your reply!
Your second idea solved our issue. So thank you :slight_smile:

4

I’m glad I could help. Thanks for reporting back.