Permissions rules

Permissions rules

Each of the following security roles has progressively more permissions:

• Guest
• View-only
• Editor
• Owner
• Admin

Guest is a security profile that can only have view only permissions granted, but may have no permissions. A user who is an Administrator can view and edit everything on the intranet when they are in Admin mode, but when they are not in Admin mode, they access the intranet with whatever permissions have been granted to them.

The security roles are context sensitive -- you can have no permissions on one page (you won't see it or even know it exists), the view-only role on another page, the editor role on another, and the owner role on another.

Security matrix

Note: Owner privileges apply to all content explicitly marked as owned by a user, as well as all content in a user's profile page. A user can delete and edit all content under their profile page, even if another user created it.

Inactive or deleted users matrix

Note on names and photos: The names and photos of inactive users are not linked to their profile page - they are linked to the list of all people (/people/). For deleted users, their name is replaced with (user deleted) and their photo with the default photo.

Note on inactive user's pages: The content created by inactive people - pages, comments, attachments - always remains available until it is specifically deleted. In the case of child pages of an inactive person's profile page, non-admins can only reach it via search or if they know the URL.

You can't delete a user who still owns pages.

Also see Search and navigation.