Purpose
chkm8-page-access refers to a CHKM8-specific page access component. Access controls should be tested using direct URLs, not only by checking whether a menu link is visible.
Safe access-control procedure
- Identify the exact page and the users who should be able to access it.
- Check which plugin or component currently controls access. Avoid running two access-control systems on the same page unless their interaction is understood.
- Review the current rule before editing it and note the previous value.
- Set the narrowest role/user access that meets the requirement.
- Save and test using an administrator, an authorised normal user, and an unauthorised user.
- Paste the page URL directly into the unauthorised user’s browser to test direct access.
- Check any linked files or entry URLs separately; protecting a page does not automatically prove every linked file is protected.
Recovery
Keep an administrator account available while changing access rules. If you lock out the intended users, revert the specific rule rather than disabling unrelated security features.