|
||
Permissions for access to Kentico CMS documents can be configured at three levels of the three-level permissions hierarchy. Click the links in the Document permission level column to learn more about each of them.
Document permission level |
Granted to |
Applied to |
Configurable in |
roles |
all documents |
CMS Desk / Site Manager -> Administration -> Permissions |
|
roles |
all documents of one particular document type |
CMS Desk / Site Manager -> Administration -> Permissions |
|
roles or individual users |
one particular document |
CMS Desk -> Content -> Edit -> Properties -> Security |
Permissions from these three levels are merged together when checking if a user is a permitted to perform an action with a document. For example, to read a CMS.News document, a user must have the Read permission on at least one of the three levels: either on document-level, or for the CMS.News document type, or for all content.
There is also one special setting that allows hiding of documents in the content tree depending on document permissions granted to the current user. See the Hiding documents in the content tree based on permissions topic for more information on this possibility.
In the Document permissions internals and API sub-chapter, you can find information about database tables and classes that are used for document permissions, as well as several examples of how permissions can be logged and managed using Kentico CMS API.