Skip to main content
Version: Latest
User ManualNeed configuration, code or deployment details? In the Technical Manual: Content Access Control Feature

Restrict Content by Role

Content Access Control lets an editor say, on each content item, which roles may view it. Use it for pages or documents that only one team should read, for example a supervisor handbook or an internal price list.

MenuContent > Content Definition > Content Types (setup); the content item editor (picking roles)
PermissionEdit content types (setup); the usual permission to edit the content (picking roles)
FeatureContent Access Control (turns on Enhanced Roles too)
Can't find it?

What you see depends on your role. If the menu, a button or a setting on this page is missing, ask your administrator to give you the permission listed above or to turn on the feature. Only administrators can turn features on and change site settings.

How it works​

The restriction uses the Role Picker part from Roles and Permissions. When the part's Restrict content? setting is on:

  • A person can view the item only if they hold at least one of the roles picked on it.
  • An item with no roles picked is not restricted. Everyone who can normally view content can view it.
  • Only viewing is limited. Who can edit, publish or delete the item still follows the normal permissions.

Set up a content type (once)​

  1. Open Content > Content Definition > Content Types and edit the content type.
  2. If it does not have the Role Picker part yet, click Add Parts, tick Role Picker, and save.
  3. Edit the Role Picker part on the content type.
  4. Tick Restrict content?. Its hint reads: When checked, only users in the selected roles will be allowed to access this content.
  5. Set the picker's other options (Exclude roles, Required?, Allow multiple?, Hint). They are described on Roles and Permissions.
  6. Save.
tip

Give the part a clear name on the content type, such as Limit access to selected roles, so editors know what the picker does. Use Exclude roles to hide roles that should never be picked, such as Administrator, Authenticated and Anonymous.

Restrict an item​

  1. Create or edit an item of that content type.
  2. In the role picker, search for and tick the roles that may view the item. When more than one role is allowed, Select All and Deselect All change every role at once.
  3. Save or publish the item.

To lift the restriction from one item, untick all its roles and save. To lift it from the whole content type, untick Restrict content? on the part.

Check the result

After you set up a restricted type, sign in as a person who does not hold the picked roles and confirm they cannot open the item. Ask your administrator for a test account if you need one.