tag:help-archives.hannonhill.com,2010-02-09:/discussions/how-do-i/17995-how-do-i-prevent-access-to-system-options-publishindexCascade CMS: Discussion 2015-05-21T12:57:08Ztag:help-archives.hannonhill.com,2010-02-09:Comment/367572412015-05-05T17:52:20Z2015-05-05T17:52:20ZHow do I prevent access to system options (publish/index)<div><p>How do I prevent users from being able to un-check the
publish/index check boxes under edit > system. (howdoi.png)</p>
<p>I have setup users and roles.</p>
<p>I have a user who is part of a group (arts) which has 'read
access' (site) role and can only access select folders.<br>
The site - read only role, has nothing enabled</p>
<p>(user.png)</p>
<p>His role also has a global "read only role" - which has no
permissions with the exception of:<br>
View the Versions tab: Enabled<br>
View users that share groups with current user: Enabled<br>
View groups to which current user belongs: Enabled</p>
<p>I added the global role, even though we're using site roles
since we needed one. (Read only.docx)</p>
<p>Within in the site tree, I have granted read access to the
group, and then on one file, I have granted write access to the one
user so he can edit his profile. (see "set permissions.png")</p>
<p>I guess what I need to know is, given the user has "write"
access to items, but his group/role doesn't have anything other
than read access, how is what he has write access to (parts of
page/ data definition etc) determined, and how would I be able to
prevent the user from being able to disable publishing or
indexing?</p>
<p>Thanks very much!</p>
<p>Brendon</p></div>birwintag:help-archives.hannonhill.com,2010-02-09:Comment/367572412015-05-06T15:50:53Z2015-05-06T15:50:53ZHow do I prevent access to system options (publish/index)<div><p>Hi Brendon,</p>
<p>In short, if a user has write access to an asset, he/she will
have the ability to modify the system options you mentioned. I did
find <a href="http://ideas.hannonhill.com/forums/52559-cascade-cms-ideas/suggestions/1802281-permission-to-prevent-users-from-accessing-system">
this related feature request</a> on our Idea Exchange that I would
encourage you to vote/comment on when you have the chance.</p>
<p>Let me know if you have any additional questions and I'll be
happy to answer them.</p>
<p>Thanks!</p></div>Tim