Role Permissions - Documentation topics on: permission inheritance,permissions,role permissions,roles,.

Role Permissions

DotCMS role permissions are hierarchical.  This means that "child" roles can be set up as a subset of a "Parent" role.  All Role permissions given to the "child" are automatically available to the "Parent" since all "child" roles are really a subset of the "parent". Therefore, it is important to plan the desired hierarchy of permissions before applying them to roles. For more information see the Permission Inheritance documentation.

HostFolder Inherit Role

Previewing and Editing Role Permissions

To preview the permission settings for a particular role first click on the roles from the drop down menu of the System tab.  Find a role in the listing on the left hand column, or by using a the keyword search filer, then click on the name of the role. Now click on the Permissions tab in the detail area to see the permission settings for the selected role.  

Apply Role Inheritance Permissions on a Hosts/Folders

Each Role in dotCMS can be set as a global role applying to "All Hosts", or be applied to a specific host or folder.  Once a choice has been made on where role permissons will be set the following permission inheritance properties configured for the role.  To cascade* any of these permission settings to already existing child objects you must check "Cascade Changes" checkbox and click the "Apply Changes" button (see image below). :

  • Hosts will inherit (All Hosts): Sets the role to be inherited by all Hosts (sets Global inheritance)
  • Folders will inherit: sets all folders belonging to the specified host/folder to inherit the role
  • Containers will inherit: sets all containers on the specified host/folder to inherit the role
  • Templates will inherit: sets all templates on the specified host/folder to inherit the role
  • Pages will inherit: sets all HTML pages on the specified host/folder to inherit the role
  • Files will inherit: sets all files on the specified host/folder to inherit the role
  • Links will inherit: sets all links on the specified host/folder to inherit the role
  • Content Types will inherit: sets all Content Types on the specified host/folder to inherit the role
  • Content will inherit: sets all content placed in folders belonging to the specified host/folder to inherit the role
Editing Role Permissions

Warning: Cascading Role permissions will overwrite child permissions.  Changing inheritance permissions from the "All Hosts", for example, and cascading will overwrite permission settings on every Host.  Careful planning should be observed when applying a cascade of permissions.