Roles and permissions
How Basker decides what each user can see and change: the built-in roles and how content is shared
Each staff member on your site has a role that decides what they can do: which content they can view, create, edit, publish, or delete, and whether they can change site settings or manage other people.
There's also the Site Owner, a separate per-site designation for the person with overall responsibility for the site. The owner isn't one of the roles you assign to staff.
How roles work
A role is a named set of permissions. Permissions are grouped by what they apply to:
- Content: each content type (pages, posts, events, people, venues, and the rest) has its own permissions for View, Create and edit, Publish, and Delete. Media and files have no publish step, so their permissions are View, Create and edit, and Delete. You can grant any combination, so a role can let someone edit pages but not publish them, or manage posts without touching events.
- Settings: separate permissions for general settings, security, domains, languages, apps, themes, transferring ownership, and managing roles and staff.
Because permissions are granular, a role can be as broad or as narrow as you need.
Site roles and templates
A site role has a name, an optional description and icon, and any combination of the permissions above. For example, create a content lead who can edit and publish everything but cannot change settings, or an editorial contributor scoped to posts only.
Role templates can provide a starting permission set, but the roles visible to staff are the roles configured for that site. Their names and permissions vary. Create, rename, and adjust them from the Roles section of Users & Permissions, then assign one when you invite or edit staff.
Changing a staff member's role replaces their selected site role in the Users & Permissions screen.
Sharing content across your sites
If your organisation runs multiple Basker sites (or works with partner organisations that do), content can be shared between them. A shared record can be edited from either site, controlled by the role the person holds on the site they're working from.
Sharing is set per record. Open a record's sharing options and pick the sites to share it with. Roles include separate permissions for working with shared content, so you can let someone view or edit shared records without giving them the same rights over the site's own content.