System roles refer to those roles which are allowed to log-in into the system and access certain website functionalities such as managing content, adding items to the home-page, modifying the menus etc.
The following list contains the basic permissions a role must have in order to access to the administrative interface (grey theme):
- Use the administration pages and help
- View the administration theme
- Use the administration toolbar
- View Bioland element in the toolbar
- Access the Content overview page
- Access the Files overview page
- Content: View published content
- Access tours
Content manager¶
This role should be assigned to a person managing content (create, edit or delete content, link content to menu etc.). A person with this role can do the following actions within the website:
- Create and manipulate content:
Create, edit and delete any of the following type of content:
- Basic page
- Document
- Ecosystem
- Event
- FAQ
- Gallery
- Landing page
- National Target
- News
- Organization
- Person
- Project
- Protected area
- Species
- Video
- Web page
- Webform
- Website
Technical note: actual Drupal permissions: *: Create new content, *: Delete any content, *: Edit any content, Use the Full HTML text format, Use contextual links, View own unpublished content, Content Landing page: Administer Panelizer Content, Content Landing page: Administer Panelizer Layout, Content Landing page: Administer Panelizer Revert to default, Use panel locks, Use the Panels In-Place Editor with Page Manager, View administrative links on Panel panes, Access panels in-place editing
Note: This role does not have permission to view or manipulate content revisions
- Translate content:
Translate any content from the website shown to anonymous users (pages, documents etc.)
Technical note: actual Drupal permissions: Translate configuration, Create translations, Delete translations, Edit translations, Translate any entity, Translate interface text
- Configure home page content:
Manipulate home page content such as slideshow, latest news displays.
Technical note: actual Drupal permissions: Manipulate queues - Access the entityqueues list, Manipulate Latest updates queue, Manipulate Slideshow queue
- Modify website's menus and menu structure:
Manipulate items from the menus.
Technical note: actual Drupal permissions: Use menu link attributes, Administer menus and menu items
- Create web forms for registrations and data collection:
Web forms are advanced forms which allows collecting data from public users such as meeting registration participants etc.
Technical note: actual Drupal permissions: Access the webform overview page, Access webform submission log, Administer webform element access, Administer webform submissions, Administer webforms, Create webforms, Delete any webform, Edit CSS/JS webform assets, Edit any webform, View any webform submission, View webform submissions for any node
- CAPTCHA: For simplicity, on website forms where CAPTCHA is present for anonymous users, these authenticated users do not have CAPTCHA shown.
Technical note: actual Drupal permissions: Skip CAPTCHA
Site manager¶
This role has all permissions of a Content manager above, plus the following extra permissions:
-
CAPTCHA: Administer CAPTCHA settings - Can manage CAPTCHA settings for public forms
-
Content: Webform - Deleting any webform submission
-
Content: Webform node - Delete webform submissions for any node
-
Content: Webform node - Edit webform submissions for any node
-
Site configuration: Administer shield module - password protect his website with Basic Authentication
-
Site configuration: Create and edit URL aliases
-
Site configuration:Administer individual URL redirections - Allow to manage redirects, useful when migrating old websites to the new platform and keep the old URLs in place.
-
Site configuration:Administer responsive favicons
-
Site structure: Administer blocks - Add/Edit/Remove/Translate blocks of content within the website
-
Content: Manipulate revisions for: Basic page, Document, Ecosystem, Event, FAQ, Gallery, Landing page, National Target, News, Organization, Person, Project, Protected area, Species, Video, Web page, Webform, Website
-
View user information - Click on an user and see its profile (name, email etc.)
TO DO:
- Administer site configuration - gives too much permissions to the Site manager we need to alter this to allow access only to certain screens such as "Site configuration" (/admin/config/system/site-information)
* Taxonomy permissions - Drupal 8.5.x will introduce permission to create taxonomy terms, postponed, see #107