Prevent a role to create an admin role

[gillesvauvarin]

Another idea should be to set different config files according to the user role as we did with the blueprint:

Hide parts of the panel for user role

You can define that via the access permission in the user blueprint. For that the best option currently is to use blueprints based on user role in your index.php. <?php require __DIR__ . '/kirby/bootstrap.php'; $kirby = new Kirby(); $user = $kirby->user(); if ($user && $user->role() == 'candidate') { $kirby = new Kirby([ 'roots' => [ 'blueprints' => __DIR__ . '/site/blueprints/candidate', ], ]); } elseif ($user && $user->role() == 'sponsor') { $kirby =…