Limit user access to account page only

The CMS Questions
1

I’m creating a user role that allows them to only edit their own account (email, password, a bunch of fields). But panel login redirects to panel/site where they can’t do anything so I want to redirect them to panel/account. But I don’t know how.

Overriding that route (and doing a role check) in config.php doesn’t work.

Setting the panel permissions for that role like so crashes the login process:

permissions:
  access:
    site: false
    settings: false
    users: false
2

Try this:

permissions:
  access:
    users: false
    settings: false
  site: false
  pages: false
  user:
    changeRole: false
    changeName: false
    delete: false

May be you want to change the lines after “user:”.

Details you can find at: Docs: User permissions

3

That’s what I have (more or less). To be clear: I have no trouble limiting editing permissions. I want the user to only see their account page after login, not the site dashboard.

The reason is: since they can only edit their account, it’s bad UX to show them something else after login and have the only page they can actually edit hidden in the menu.

4

@phm Since you can’t redirect from a hook, maybe you can use a custom Panel login that redirects to the account. Or use a custom login form on the frontend.

5

Aha, the custom Panel login seems like a solution. Will try that, thanks.

Upvoted the login hooks github issue though, that would be easier :slight_smile:

6

is it still so that you cannot forward the user to his account page with the hook ‘user.login: after’?