Restrict access only own content

35 views
Skip to first unread message

Jhon Benites

unread,
Jun 27, 2019, 4:54:16 PM6/27/19
to dotCMS User Group
Hi guys, i have this case:

Role1: This role can view/edit/publish content of the "Customer" contentType
Role2: This role can view/edit/publish content of the "Customer" contentType
User1: belongs to the Role1
User2: belongs to the Role2

Let's say that the User1 creates Customer1 and Customer2 content
and the User2 creates Customer3 and Customer4 content

My current behavior is:
When the User1 access to the cms he can see all Customer content, it is Customer1,Customer2,Customer3 and Customer4
When the User2 access to the cms he can see all Customer content, it is Customer1,Customer2,Customer3 and Customer4

Is there any way to restrict the User1 and the User2 only can see their own content?

It is:
User1 access to the CMS and he only can see: Customer1 and Customer2
User2 access to the CMS and he only can see: Customer3 and Customer4

I will appreciate any response or suggestion on it. The DotCMS version that we are using is 4.3.3.


Thanks in advance.

John Michael Thomas

unread,
Jun 28, 2019, 12:03:37 PM6/28/19
to dotCMS User Group
Try removing the "Edit" authorization from the Roles and adding "Create" authorization instead.

  • Edit permission means the user can edit content owned/created by other users.
    • So if you give users that permission, they will be able to edit content owned/created by other users.
  • Create permission means the user can create new content, but not edit other users' content.
    • However a user can still edit content they created, even if they don't have the "Edit" permission set - so this permission should be what you want.

Jhon Benites

unread,
Jun 28, 2019, 1:13:09 PM6/28/19
to dotCMS User Group
Hi John

Thank you so much for your response. On the cms, on the screen where i set the permissions by role i am not seeing "Create" authorization, i only see these:

Screen Shot 2019-06-28 at 12.05.48 PM.png

Is there any way to set that "Create" authorization?


Thank you John!!!
Reply all
Reply to author
Forward
0 new messages