Field-level Permissions via Custom Fields in dotCMS

dotCMS Product Discussions
1

Sometimes you want your users to have access to a Content Type, but not have the ability to change things (for example, the Host or Folder field).
You can use a Custom Field to redact that particular field, and you can base that field on role.

Here’s an example:
#if (!$cmsuser.isCMSAdmin($user))
-script-
document.getElementById(‘HostSelector’).style.display=“none”;
document.getElementById(‘hidehost_tag’).style.display=“none”;
document.getElementById(‘host1_tag’).style.display=“none”;
-script-
#end

Here’s another little trick, you can hide a Tab, like the Advanced Tab. This way you can just throw all the stuff you don’t want the editors to see on one tab and not write code for each:
#if (!$cmsuser.isCMSAdmin($user))
-script-
window.addEventListener(‘load’, function() {
dtabs=document.getElementById(‘mainTabContainer_tablist_tab_advancedtab’);
dtabs.parentElement.style.display=“none”;
//have to do onPageLoad because content isn’t there yet
});
-script-
#end

Hope someone finds this useful.
Had to use -script-, because the engine strips all HTML. Maybe there’s a markdown trick or something.

3 Likes
2

Thanks for your previous post @MarkPitely! Your thread is now under Product Discussions, and we’ll get back to you soon!

3

Pretty neat! Now I’m thinking I might want to have a place to add custom JavaScript to customize the edit content screen, pretty much like a Google Chrome extension for edit content screen.

4

@MarkPitely thank you so much for sharing this! I hadn’t thought about grouping everything in a tab and hiding that. Useful for protecting SEO and other types of information that is not for every user. Appreciate the tips!

5

I would love that! That would be amazing.
M