Users and Permissions

Users & Permissions

Admin Users

Admin users are managed under System → Users in the admin panel.

User Properties

Property	Description
Name	Display name
Email	Login email
Password	Hashed login password
User Group	Determines permissions
Language	Preferred admin interface language
Root Item	Personal tree root — overrides the group's entry item

User Groups

Groups control what actions users can perform. Manage them under System → User Groups.

Global Permissions

Permission	Description
Create/Edit/Delete/List Users	Manage admin user accounts
Create/Edit/Delete/List Blueprints	Manage content type definitions
Create/Edit/Delete/List Groups	Manage user groups

Entry Item

Each group has an Entry Item — the root of the content tree that members of this group can see and edit. Use this to scope editors to specific subtrees (e.g. a marketing team that only sees the Blog branch).

Blueprint-Level Permissions

Per blueprint, you can grant a group CRUD permissions:

Permission	Description
Create	Can create new items of this blueprint
Read	Can view items
Update	Can edit items
Delete	Can delete items

Set Allow All Blueprints to grant access to all blueprints without listing them individually.

Workflow Step Permissions

Individual workflow steps can be restricted to specific groups. Only members of the allowed groups can advance an item past that step. Leave empty to allow anyone.

Creating a Restricted Editor

Example: blog editor who can only manage blog posts.

1. Create a User Group named "Blog Editors"
2. Set Entry Item to the Blog container item
3. Under Blueprint Permissions, add blog_post with Create + Read + Update (no Delete)
4. Assign users to this group

Superadmin

A user with full access (no entry item restriction, allow all blueprints, all global permissions) acts as a superadmin. The default admin@admin account seeded by the demo app has this configuration.