Authorization and access control

A person who configures a Zotonic site users permissions modules and operational settings.

• Site administrator
• Identity and accounts

• Assign user groups and check access
• Choose the site admin or the status site
• People and permissions

A person who creates organizes reviews and publishes site content.

• Content editor
• Identity and accounts

• People and access
• Upload restrictions
• Users and editors

A programmer who builds Erlang modules models controllers notifications and data behavior.

• Backend developer
• Security

• Keep permission checks at the boundary
• Test with different users
• Work with a site context