Role | User | Access Control - Define new users

Support
1

Basically the main goal of this question is to understand can Squidex be used as backend for medium.com like features for authoring & reading. The more granular questions are as follows

These are very specific questions from Contributors Access Control perspective based on a new role I want to create called ‘author’

  1. Role author such that (authors can create and save to draft only but as part of workflow they can’t publish the content)
  2. User Scope limited to him (Can permissions be set so authors only see only their content and not read other authors content)
  3. Can a view be set so authors aren’t exposed to schemas / other configuration options on squidex?

What definitions(granular permissions should I write on each to make this work?

2

  1. Yes, that should be possible.

  2. No you can always see all content.

  3. Not yet, because the permissions are given on the requirements, e.g. to make edit content the UI needs to query schemas, therefore you have permissions to view schemas as well, therefore the schemas tab is shown.

3

It would be good if the schema tab button gets disabled when you do not have the rights to view it.

4

But you always have the rights to view it :wink:

To manage content you need access and to view languages to list schemas (some UI features needs it). To view schemas you need to list patterns as well. Therefore you have a bunch of implicit permissions.

The UI is driven by the permissions that you have. In fact the UI does not make any decisions at all, what to show and what not, the API tells the UI what is possible through links (HATEOAS).

I understand that you don’t want to give your users access to schemas, but this would require another permission system (or settings) just for the UI.