Scopes & Permissions

Admin > Scopes

Jolojo has a powerful scoping and permission engine that can be used in many ways such as a Members website or to show and hide certain functionality to users when they are logged in - My Account in ecommerce is an example of this.

By default Jolojo has the following Scopes enabled:

  • Super - this is in in-built Super User account and is given to you on site creation. Only Super users can create other super users, they also have full access to all scopes and can view inactive pages, products etc.
  • Admin - very similar to Super, but can not create Super users

Other inbuilt scopes that effect how users at certain levels can access data etc. are:

  • emailTemplate:findAll - allows users to fins Email Templates
  • emailTemplateType:findAll - allow users to find Email Template Types
  • file:createFolder - allow folders to be created within the File Manager
  • file:delete - allows users to delete files
  • file: meta - allows users to edit the meta data of a file
  • file:move - allow a user to move files between folders
  • file:upload - allows users to upload files
  • file:view - allows users to view files
  • person:findAll - allows users to view and find other users
  • user:imposter - allows a user to impersonate another user (very useful for testing scopes)

You are able to crate new scopes and apply them in various ways.

Image

Add a scope

To add a new scope, click the 'Add scope' button. The modal give you two options:

  • Name - this is an internal system name
  • Display Name - this is the name that is used to scoping

Apply a scope to a page (limits who can see the page).

By default, all users can see a page. However you can restrict access to a whole page by selecting a scope for the page. If a user does not have permission to view the page, they will be taken to a 403 error page.

Edit the page > Click the Advanced Options icon > Select who can see the page

Apply a scope to a plugin

By default, all users can see all plugins. However you can restrict a plugin displaying on a page so that only a user with a particular scope can see it.

Eit the plugin > Click on the Top Bar Padlock icon > Select who can see the plugin

Note - there are actually two methoids that can restrict a plugin displaying on a page, the second is by using a program.