Permissions

Permissions System

Stelo CMS implements a comprehensive role-based access control system to secure content and administrative functions.

User Roles

Admin

• Full system access
• User management
• System configuration
• All content operations

Editor

• Content creation and editing
• Media management
• Own content management
• Limited system access

Viewer

• Read-only access
• Content preview
• No editing capabilities
• Stakeholder access

Permission Matrix

Operation	Admin	Editor	Viewer
Create Content	✅	✅	❌
Edit Own Content	✅	✅	❌
Edit All Content	✅	❌	❌
Publish Content	✅	✅*	❌
Delete Content	✅	✅*	❌
Manage Users	✅	❌	❌
System Settings	✅	❌	❌

*Editor permissions can be configured per installation

Implementation

// Permission check middleware
const requirePermission = (permission: Permission) => {
  return (req: Request, res: Response, next: NextFunction) => {
    if (!hasPermission(req.user, permission)) {
      return res.status(403).json({ error: 'Insufficient permissions' });
    }
    next();
  };
};

This section will be expanded with detailed implementation examples.