Revindex Storefront

Access Control

Last updated on 2023-09-21 3 mins. to read

By default, the Storefront Administration module is only visible to Administrators from the persona bar. The following topic demonstrates how to allow non-administrators access to your module and to set granular permissions. 

Create a new role

Although you can grant access by user accounts, we recommend using a security role to group the user accounts together. This approach makes security more maintanable as the number of users grow.

  1. From the persona bar, go to Manage > Roles to add a new role.
  2. Click on Create New Role.
  3. Give your role a name (e.g. "Sales Users") and save your changes.


Assign role to your user

You can assign your user the desired role you created. Any permission granted to the role will automatically be applied to the user.

  1. From the persona bar, go to Manage > Users.
  2. Find your user and click on the User Roles button.
  3. Enter the role to add to the user and click Add.


Create non-administrator link

By default, the Storefront Administration module is located on the persona bar that is only visible for Administrators. To allow non-administrators access from the Web site menu, you need to create a new link.

  1. From the persona bar, go to Content > Pages.
  2. Click Add Page.
  3. Choose Page Type = "Existing".
  4. In the Existing Page dropdown, select the "Admin > Storefront".
  5. Give your page a name. E.g. "Storefront"
  6. Make sure the Display in Menu is enabled.

  7. Under the Permissions tab, grant View access to your new role.

  8. Save your changes. You should now be able to see the Storefront link from the main menu if you are logged in as the user with the role. Feel free to rename or move the link elsewhere.


Grant page access permission

You need to make sure your new role has View access to the Storefront Administration page.

  1. From the persona bar, go to Manage > Storefront.
  2. Turn on the edit page mode and go to the page settings.

  3. Grant your role the View access permission to the page. Click Save.


Control granular permission

Limit access to the Storefront module control can be controlled via the standard permissions under the module settings. You can restrict view or edit access to parts of the management screen.

  1. In edit mode, go to the Storefront Administration module settings.

  2. Uncheck the Inherit View permissions from Page because you will be setting a more restrictive permission for the module than the page. Choose the desired access under each View/Edit columns. At minimal, the View Module permission should be granted.

    For example, you may want to enable the View ModuleView Sales and Edit Sales permissions for sales users.

  3. Save your changes.


Powered by Revindex Wiki