# Role and rights problem

**URL:** <https://forum.getkirby.com/t/role-and-rights-problem/24664>\
**Category:** Questions\
**Tags:** v3\
**Created:** [February 6, 2022, 12:52pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664 "2022-02-06T12:52:43Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![m\_herzog](https://avatars.discourse-cdn.com/v4/letter/m/ed8c4c/32.png) [@m\_herzog](https://forum.getkirby.com/u/m_herzog)\
**Post date:** [February 6, 2022, 12:52pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/1 "2022-02-06T12:52:43Z")

</div>

I don’t know if I understand something wrong with roles and rights in Kirby ?!?  
I am using Kirby 3.6.0.

1. In one of my role definitions i define: \*:false
2. So the option “create” is set to false
3. In a page I whant to activate the option “create” and set it to true
4. The page has the option “update” set to true
5. NOTHING HAPPENS when I edit the page → can’t create new elements inside the page content

What do I do wrong ?!?  
THX for helping out!

---

<div class="post-metadata">

**Author:** ![texnixe](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.getkirby.com/texnixe/32/5754_2.png) [@texnixe](https://forum.getkirby.com/u/texnixe)\
**Post date:** [February 6, 2022, 1:07pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/2 "2022-02-06T13:07:29Z")

</div>

Could you please post exactly what you have set where, i.e. your role blueprint and the page blueprint, so I can try and recreate it.

Also, please update to the latest Kirby version 3.6.2 to make sure that we are not trying to hunt bugs that have already been fixed.

---

<div class="post-metadata">

**Author:** ![m\_herzog](https://avatars.discourse-cdn.com/v4/letter/m/ed8c4c/32.png) [@m\_herzog](https://forum.getkirby.com/u/m_herzog)\
**Post date:** [February 6, 2022, 1:17pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/3 "2022-02-06T13:17:10Z")

</div>

**I updated to 3.6.2 nothing changed!**

_In my user role with [role name] I set:_  
permissions:  
pages:  
\*: false  
preview: true  
read: true

_In my page I set:_  
options:  
create:  
[role name]: true

THX

---

<div class="post-metadata">

**Author:** ![m\_herzog](https://avatars.discourse-cdn.com/v4/letter/m/ed8c4c/32.png) [@m\_herzog](https://forum.getkirby.com/u/m_herzog)\
**Post date:** [February 6, 2022, 1:19pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/4 "2022-02-06T13:19:16Z")

</div>

If I understood the role system from kirby the rights set inside a page should overwrite role permission ?!?

---

<div class="post-metadata">

**Author:** ![texnixe](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.getkirby.com/texnixe/32/5754_2.png) [@texnixe](https://forum.getkirby.com/u/texnixe)\
**Post date:** [February 6, 2022, 1:47pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/5 "2022-02-06T13:47:12Z")

</div>

Yes, sorry, I can reproduce the issue and there is an open issue on GitHub:

> <https://github.com/getkirby/kirby/issues/3828>
>
> \*\*Describe the bug\*\*  
> The \`add()\` method in a pages section only checks global… pages create permission. The consquence is that the Add button is never shown if the role/editor does not have this permissions. Nonetheless, if a role/user has permissions to create a page (can be template specific) in that pages section, he should be able to Add it from the pages section.
> 
> More info about this in the forum: https://forum.getkirby.com/t/kirby-permissions-to-give-role-permissions-to-manage-content-of-1-blueprint-only/23716
> 
> \*\*Expected behavior\*\*  
> A user should be able to add a page to a pages section if he has permissions to generate that page, even when his global "pages create" permission is false.
> 
> \*\*Kirby Version\*\*  
> 3.5.7.1

So until this will be fixed in 3.7, you would have to remove the global setting in favor of blueprint specific settings, I’m afraid.

---

<div class="post-metadata">

**Author:** ![m\_herzog](https://avatars.discourse-cdn.com/v4/letter/m/ed8c4c/32.png) [@m\_herzog](https://forum.getkirby.com/u/m_herzog)\
**Post date:** [February 6, 2022, 4:31pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/6 "2022-02-06T16:31:12Z")

</div>

This does not work either!  
If i remove the “\*: false” in the role definition and use “create: false” in the page blueprint, creation is still possible ?!?

---

<div class="post-metadata">

**Author:** ![m\_herzog](https://avatars.discourse-cdn.com/v4/letter/m/ed8c4c/32.png) [@m\_herzog](https://forum.getkirby.com/u/m_herzog)\
**Post date:** [February 6, 2022, 4:34pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/7 "2022-02-06T16:34:21Z")

</div>

When will 3.7 be released?  
It should be fixed asap because it is a real showstopper in the role-right-management ;-(

---

<div class="post-metadata">

**Author:** ![texnixe](https://dub1.discourse-cdn.com/flex017/user_avatar/forum.getkirby.com/texnixe/32/5754_2.png) [@texnixe](https://forum.getkirby.com/u/texnixe)\
**Post date:** [February 6, 2022, 4:49pm UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/8 "2022-02-06T16:49:11Z")

</div>

You are right, looks like the page blueprint settings are completely ignored.

I have no ETA for 3.7. Did this actually work in 3.5?

But can you actually create a page when you set `create: false` or is just the button visible? Because in my quick test, I can’t actually create pages.

---

<div class="post-metadata">

**Author:** ![m\_herzog](https://avatars.discourse-cdn.com/v4/letter/m/ed8c4c/32.png) [@m\_herzog](https://forum.getkirby.com/u/m_herzog)\
**Post date:** [February 7, 2022, 6:45am UTC](https://forum.getkirby.com/t/role-and-rights-problem/24664/9 "2022-02-07T06:45:15Z")

</div>

If I set “create: true” in the blueprint no add button appears! Other rights are working only “create” seems to have a malfunction and do nothing ☹  
If I set “create: true” in the user role the add button appears and I can also create pages. Actual I use kirby 3.6.2 after updating from 3.6.0!
