Permissions control what actions users can perform within the platform. Administrators can create custom permissions and assign them to roles.
Overview
The permissions system works alongside roles. While roles are collections of permissions, permissions are individual capabilities that can be assigned to roles.
How to Access
- Log in as an administrator
- Navigate to Users in the sidebar
- Click on Permissions
Prerequisites
- Administrator role required
Step-by-Step Guide
Step 1: View All Permissions
The permissions list shows every permission in the system with its name, description, and the module it belongs to.
Step 2: Create a New Permission
Click Add Permission. Enter:
- Name: Internal identifier (e.g., users.view)
- Display Name: Human-readable name (e.g., View Users)
- Description: What this permission allows
- Module: Category this permission belongs to
Step 3: Assign Permission to Roles
Edit a role and add the new permission to it. The permission will then be granted to all users with that role.
Step 4: Remove Permissions
To remove a permission, edit the role and uncheck the permission. Changes take effect immediately.
Best Practices
- Use consistent naming: module.action (e.g., wiki.create, auction.bid)
- Create granular permissions for flexibility
- Regularly audit permission assignments
Quick Reference
| Route | admin.user_management.permission.index |