Jump to:

23483 Posts in 18976 Topics by 2878 members

General Questions

SilverStripe Forums » General Questions » Multiple admin account issue

General questions about getting started with SilverStripe that don't fit in any of the categories above.

Moderators: martimiz, Sean, biapar, Willr, Ingo, swaiba, simon_w

Page: 1
Go to End
Author Topic: 982 Views
  • chris404
    Avatar
    Community Member
    1 Post

    Multiple admin account issue Link to this post

    I'm currently in the planning stages of a new Silverstripe project that requires several (a few hundred) admin logins. The concept is that each of our clients has their own login that allows them to edit their specific page. I've gone over the security of SS and so far this does not seem to pose an issue.

    What does pose an issue, however, is that each of our clients must not be able see the admin pages of other clients. I understand I can restrict write access, but the business needs are such that each client must not be able to:

    A) See the "edit page" of another client's page.
    B) See the list of pages in the left hand menu (effectively showing our clients who else we are doing business with).

    While at the same time, all the client's pages are open to the public.

    For example, say there are two clients, client "Tom" and client "Jerry". Each has their own page, so the admin left hand menu would show up as such:

    HOME
    |-->Clients
    |--|-->Jerry
    |--|-->Tom

    If I'm Jerry then when I login I should be able to go directly to the HOME->Clients->Jerry page and edit that content. I should NOT be able to edit Tom's page, view Tom's admin page, or even see Tom's page in the admin menu. Additionally, the actual client pages (i.e. not the admin page, but the "published" page) must be public to the world.

    To add another element, we do need to have a master admin that can access and edit all the clients pages.

    I've done some research and don't see a clear and easy way to accomplish this, does anyone has some ideas here?

    Thanks for the help!
    Chris.

  • Willr
    Avatar
    Forum Moderator
    5508 Posts

    Re: Multiple admin account issue Link to this post

    I think the only way you can get the functionality you want (hiding the features completely) could be by using the subsites module. http://doc.silverstripe.org/modules:subsites and setup each of your client logins with their own subsite, then you can basically hide everything for users of that subsite while super admins can edit over all pages.

    Normally its designed for different subdomains or domains so not sure its the right solution in your case but thats the best thing I can think of!

    982 Views
Page: 1
Go to Top

Want to know more about the company that brought you SilverStripe? Then check out SilverStripe.com

Comments on this website? Please give feedback.