Setup: reference
Permissions and login
Two rules answer almost every question about permissions:
- Permissions combine. Of all the places that grant a permission, the most generous one applies.
- Project and layout are upper limits. A field permission is capped by the layout and project permissions.
The explanation is under How permissions combine . This section has the tables.
| Page | Contents |
|---|---|
| Permission model | The decision tables for project, layout and field |
| Roles and status | What levels 3, 6 and 9 allow, role setups that work well |
| Admin areas | The main menu and which area requires which status |
| Shares | Public sharing, Linked Data and IIIF |
| Login | Password, two-factor login, single sign-on, lockout |
Test only with status 3
Status 6 and 9 bypass every permission table. You can therefore only test permissions with an account with status 3. If you test as an administrator, you always see everything and take the setting to be correct.