Roles and permissions
Who can do what on the site and in the panel: roles, levels, category access and automatic role assignment.
Users & access → Roles. A permission is one allowed action (“edit news”, “manage modules”). A role is a bundle of permissions. Permissions are given to a role and the role to a person, so you do not hand them out one by one.
Default roles
The engine ships with five roles: owner (level 100), administrator (80), editor (60), moderator (40) and user (10). You can add your own roles, and one person can have several roles — their permissions add up.
The level decides not what a role may do but whom it may edit: you cannot touch a role that is not below your own, and a new role’s level must be below yours. The owner’s permissions are deliberately not configurable: otherwise a single unticked box would leave the site without control.
Setting up a role
Open the role, tick the permissions you need and press “Save”: until you do, the role keeps its old permissions. The “permission — role” table shows how roles differ. You can copy the permissions of another role — only those you may grant yourself. A role can have a name in several languages, plus a colour and an icon: they show next to the person’s name in comments, on the forum and in the profile (access does not change).
Permissions whose abuse hurts the site’s people carry a warning: give them only to those you trust.
Role categories
The “Role categories” button on the roles page answers “which categories does this role see”. By default a role sees everything. You can hide some categories or leave only chosen ones, and for a forbidden category hide either everything or only the full text (entries stay in the feed with their short text). If a person has several roles, they see a category when at least one role opens it. The owner sees everything. A category closed to some role cannot be deleted until you open it: otherwise its entries would be left without a category and become visible to all.
Automatic role assignment
The “Automatic role change” button on the roles page: rules like “whoever has role A and has been registered for 30 days (or has written so many entries) gets role B”. The site checks them once a day. Only the owner can change the rules. For safety only a weak role can be assigned automatically: it must not give access to the panel or management of people, roles, settings, updates, theme code, keys and backups, and its level must be below moderator. The owner role does not take part. Deleting a rule does not take back a role already given.