Access Control

For each created channel, it is possible to add groups and users who will be able to access it and grant permissions to each of them.

There are two ways to verify the access control of a channel:

In the browser, right-click on the channel and select the Control Access option;

In the administrative area of channels, select the channel and then Control Access;

The possible access permissions to a channel are: manage channel, users, local groups, pages, page template, service instances, as well as manage the security of all these objects. Among the permissions, there are also view pages, view page templates, and view service instances. In relation to the page, there is also the permission for its layout. However, if the Inherit Access Control option is enabled, the access control for the inherited groups and users will be inherited from the "parent" channel, only allowing permissions to be denied to them. Regardless of inheritance, it is possible to assign and deny permissions to users and groups added in the channel's access control. By default, users and groups added to the access control have the permissions to "view page" and "view service instance", but they can be denied as needed.

The figure above is an example of access control for a "Portal" channel, from which the group "Portal Administrators" was inherited from global access. As the "Inherit Access Control" option is disabled, it is possible to grant this group permissions as well as deny them. To the added groups, "Publishers" and "Developers", permissions can be granted or denied regardless of inheritance. Additionally, by default, these last two groups have the permissions to "view page" and "view service instance".

Below are the permissions related to the channel:

Permissions	Includes permissions	Description
Channel access control
Manage channel security	Manage channel Manage local users Manage local groups security Manage local groups Manage page security Manage page Layout page View page Manage page template security Manage page template Layout page template View page template Manage service instance security Manage service instance View service instance Manage local user member Manage local group member	Allows managing the access control of the channel.
Manage channel	Inherits permission from the portal to manage the channel, if the inheritance of the channel access control is enabled.	Allows adding, editing, and deleting channels.
Manage local users	Inherits permission from the portal to manage users, if the inheritance of the channel access control is enabled. Manage local users	Allows adding, editing, and deleting local users in the channel.
Manage local groups security	Inherits permission from the portal to manage group security, if the inheritance of the channel access control is enabled. Manage local groups	Allows managing the access control of local groups in the channel.
Manage local groups	Inherits permission from the portal to manage groups, if the inheritance of the channel access control is enabled.	Allows adding, editing, and deleting local groups in the channel.
Manage page security	Inherits permission from the portal to manage page security, if the inheritance of the channel access control is enabled. Manage page Layout page View page	Allows managing the access control of the pages of the channel.
Manage page	Inherits permission from the portal to manage pages, if the inheritance of the channel access control is enabled. Layout page View page	Allows adding, editing the properties of the page, and deleting the pages of the channel.
Layout page	Inherits permission from the portal to layout pages, if the inheritance of the channel access control is enabled. View page	Allows changing the layout of the pages of the channel.
View page	Inherits permission from the portal to view pages, if the inheritance of the channel access control is enabled.	Allows viewing the pages of the channel.
Manage page template security	Inherits permission from the portal to manage page template security, if the inheritance of the channel access control is enabled. Manage page template Layout page template View page template	Allows managing the access control of the page templates of the channel.
Manage page template	Inherits permission from the portal to manage page templates, if the inheritance of the channel access control is enabled. Layout page template View page template	Allows adding, editing, and deleting the page templates of the channel.
Layout page template	Inherits permission from the portal to layout page templates, if the inheritance of the channel access control is enabled. View page template	Allows changing the layout of the page templates of the channel.
View page template	Inherits permission from the portal to view page templates, if the inheritance of the channel access control is enabled.	Allows viewing the page templates of the channel.
Manage service instance security	Inherits permission from the portal to manage service instance security, if the inheritance of the channel access control is enabled. Manage service instance View service instance	Allows managing the access control of the service instances of the channel.
Manage service instance	Inherits permission from the portal to manage service instance, if the inheritance of the channel access control is enabled. Edit service instance content View service instance	Allows adding, editing, and deleting the service instances of the channel.
Edit service instance content	Inherits permission from the portal to edit service instance content, if the inheritance of the channel access control is enabled. View service instance	Allows editing the content of the service instances of the channel.
View service instance	Inherits permission from the portal to view service instances, if the inheritance of the channel access control is enabled.	Allows viewing the service instances of the channel.
Manage local user member	Inherits permission from the portal to manage local user member, if the inheritance of the channel access control is enabled.	Allows making local users members of a group or an access control.
Manage local group member	Inherits permission from the portal to manage local group member, if the inheritance of the channel access control is enabled.	Allows making local groups members of a group or an access control.