Worklog for task "Refactor MODX authorization considering mgr/web contexts"
The new personal account uses the existing MODX user authentication
The production version of the new personal account implements a fundamentally important scenario: the new frontend works with the current MODX user authentication rather than introducing a separate login system.
A user who is already authenticated in the existing system can go to the new account and continue working with their data and applications. This is especially important for a phased launch, because the old and new personal accounts currently operate in parallel and should be perceived as two shells over a single account and a single backend.
The current result confirms the viability of the integration scheme for the new frontend with MODX authentication/session. The new pass request section is already operating using this authentication.
At the same time, the separate task of correctly handling context-specific mgr/web authentication remains relevant: the production integration uses the current MODX user, but the nuances of separate context tokens and ambiguous session states need to be brought to a fully formalized and tested scheme.
Fix MODX authorization checks to correctly account for separate user states in the mgr and web contexts without relying on the existence of a shared session.