# Permissions - advanced but also simple

**URL:** <https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229>\
**Category:** Using Concrete / Help\
**Created:** [March 15, 2023, 1:45am UTC](https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229 "2023-03-15T01:45:50Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![ampersand](https://forums.concretecms.org/user_avatar/forums.concretecms.org/ampersand/32/6245_2.png) [@ampersand](https://forums.concretecms.org/u/ampersand)\
**Post date:** [March 15, 2023, 1:45am UTC](https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229/1 "2023-03-15T01:45:50Z")

</div>

Permissions.  
Apart from that, the information on how to set them up is scattered all over the site and there is no one way to set them up to make them work like in the movies.  
However, several sensitive issues arise.  
I went through the guides and the movie several times - I couldn’t set up such a workflow as in the movie about

[![](https://forums.concretecms.org/uploads/default/original/2X/f/f2c36ca99ed1693f6dbb2809d6848a79cbdc3747.jpeg "Writer/Editor workflow for large teams") ](https://www.youtube.com/watch?v=SZpSUdO_84M)

I may not be smart enough.  
However, I was able to find a strange behavior

If member “Writer/Editor” gets access to some blocks - he can place them anywhere within the granted access on the site, e.g. in the footer

He can also modify the appearance of blocks, areas, layouts

I understand that this can be turned off on many levels, but shouldn’t it be turned off by design? This seems a more reasonable solution.

In my humble opinion, the “permissions” documentation should definitely be reviewed and supplemented with details.

ps. Maybe it works as it should and I just don’t understand it, if there is someone in the group who can help me understand it, I will be grateful. (we can even write a tutorial after this).

Another point is if a visitor can see the content of the page does that mean the admin or other logged in user can too?  
I have a block with no access changes that is visible to “Guest” but not visible to writer/editor

---

<div class="post-metadata">

**Author:** ![EvanCooper](https://forums.concretecms.org/user_avatar/forums.concretecms.org/evancooper/32/4597_2.png) [@EvanCooper](https://forums.concretecms.org/u/EvanCooper)\
**Post date:** [March 17, 2023, 1:21am UTC](https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229/2 "2023-03-17T01:21:37Z")

</div>

Hi @ampersand - I’ve read through this and I’ll get back to you on the permissions doc question but I did want to answer one part of this.

So “Guest” and “Registered User” are kind of pseudo-groups. That said, if you set the “View” permission to guest, all groups (and admins) can see it - it doesn’t mean strictly for guest and no one else.

I’ll take a look at this vid and see if I can find any snags.

---

<div class="post-metadata">

**Author:** ![ampersand](https://forums.concretecms.org/user_avatar/forums.concretecms.org/ampersand/32/6245_2.png) [@ampersand](https://forums.concretecms.org/u/ampersand)\
**Post date:** [March 17, 2023, 1:31am UTC](https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229/3 "2023-03-17T01:31:11Z")

</div>

> [@EvanCooper](#):
>
> So “Guest” and “Registered User” are kind of pseudo-groups. That said, if you set the “View” permission to guest, all groups (and admins) can see it - it doesn’t mean strictly for guest and no one else.

I have a block that is visible to “Guest” but not visible to writers/editors, who by definition are logged in.

Guest:

 ![image](https://forums.concretecms.org/uploads/default/original/2X/f/f37cb07212d309b4804767b05c5d18d4c6706094.jpeg)

Editor:

 ![image](https://forums.concretecms.org/uploads/default/original/2X/9/9ed3889fab48e1e88e04e8dd9ada492a128d411a.png)

 ![image](https://forums.concretecms.org/uploads/default/original/2X/b/be2dbab663d4fcf89ca36365879644e08a8f1ecf.jpeg)  
same permissions as other blocks

 ![image](https://forums.concretecms.org/uploads/default/original/2X/3/375e0c9eb25a25beccdf3a2355dd0f0b6bcd2992.jpeg)

---

<div class="post-metadata">

**Author:** ![EvanCooper](https://forums.concretecms.org/user_avatar/forums.concretecms.org/evancooper/32/4597_2.png) [@EvanCooper](https://forums.concretecms.org/u/EvanCooper)\
**Post date:** [March 17, 2023, 4:39pm UTC](https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229/4 "2023-03-17T16:39:37Z")

</div>

Got it - so is that a custom block or a template? I feel like the editor folks should be able to see it.

If you add the editors group to that blocks view permission explicitly, does it show up for them?

---

<div class="post-metadata">

**Author:** ![ampersand](https://forums.concretecms.org/user_avatar/forums.concretecms.org/ampersand/32/6245_2.png) [@ampersand](https://forums.concretecms.org/u/ampersand)\
**Post date:** [March 17, 2023, 7:13pm UTC](https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229/5 "2023-03-17T19:13:58Z")

</div>

Is a custom block, and only shows the header - I’ll let the author know about it.  
I checked the exclusion of another block and it works fine.  
So one problem is potentially solved. 🙂

---

<div class="post-metadata">

**Author:** ![ampersand](https://forums.concretecms.org/user_avatar/forums.concretecms.org/ampersand/32/6245_2.png) [@ampersand](https://forums.concretecms.org/u/ampersand)\
**Post date:** [March 23, 2023, 10:25pm UTC](https://forums.concretecms.org/t/permissions-advanced-but-also-simple/5229/6 "2023-03-23T22:25:24Z")

</div>

@EvanCooper I checked it again on a clean version of 9.2.  
The problem may be in the updated version, in the clean install version this external block is visible.

**Logged in as Writer with minimal permission**

 ![image](https://forums.concretecms.org/uploads/default/original/2X/c/c7afb78ed852b06881f3a5c10eb89641b3b2ce5c.jpeg)

btw. @enlil amazing block [https://marketplace.concretecms.com/marketplace/addons/enlil-page-list](https://marketplace.concretecms.com/marketplace/addons/enlil-page-list)
