# Roles and Permissions {% hint style="info" %} This feature is available on Beefree SDK [paid plans](https://developers.beefree.io/pricing-plans) only. {% endhint %} ## About roles and permissions In Beefree SDK we introduced the idea that some content may be editable by some users and not others. For example, you may want the header and footer section of an email newsletter to be locked, so that it cannot be inadvertently modified when creating the latest version of your weekly news digest. Internally, we’ve been calling this feature “Restricted editing”. Others refer to it as “locked regions”, “blocked content”, and more. To allow for this, we created ways for the application hosting the builder to define user roles and set their permissions. Let’s take a look at how the feature works first and then show you how to configure your application to take advantage of it. ## Types of roles The user roles that you create (e.g. *Brand Manager*, *Senior Editor*, *Junior Editor*, etc.) can have different permissions. You can create as many or few user roles as you wish. The permissions that you can assign to them refer to: * Locking content (entire rows or specific content blocks) * Editing locked content * Using [Display Conditions](https://docs.beefree.io/beefree-sdk/~/changes/480/other-customizations/advanced-options/display-conditions) Specifically, the permission settings that can be configured for each role are: * Can lock rows (if active, all other permissions are granted) * Can lock modules * Can edit locked rows * Can edit locked modules * Can select Display Conditions * Can edit Display Conditions * Can remove Display Conditions For example, a *Brand Manager* all four permissions checked, whereas a *Senior Editor* might have editing access to rows and modules, but won’t be able to lock rows and modules. Let’s take a look at a few scenarios. ## Locking a row If the user has this permission, locking a row is very easy to do. That user will simply select the row they would like to lock and click on the lock/unlock radio button in the row properties panel.
If a user does not have the permissions needed to edit a locked row, they will see a friendly error when they attempt to select the row, notifying them that the row can’t be edited:
Likewise, they will not be able to drag & drop any content blocks on the locked row, as shown here:
## Rows vs content blocks You can restrict access to layout changes while granting access to content modifications by using user roles and permissions. This allows you to give your users editing access to the content, while ensuring that the overall layout of the message is not altered, and that specific content blocks that should not be modified are left “as is”. This way, for example, a junior member of the marketing team could focus on updating text & images, without worrying about potentially modifying the structure of the message in an unwanted and/or unauthorized way. Or, as shown in the example below, the same user could update social media icons and links in the footer of an email, without altering legal language and dynamic fields used in the same footer. That’s accomplished by setting us a social media module that’s editable (unlocked), but in a row that’s locked. When users without the proper permissions try to edit, move or remove the row, they are told that they may not do so.
Similarly, if they try to edit any content is the row that has not been specifically unlocked, they are told that they are not able to do so. In this case, for instance, the user is not able to edit the merge tags used in the footer of the email.
However, when they click on the social media icons, they are able to edit it.
To accomplish the above, a user with higher permissions needs to: 1. Open the message in the builder 2. Lock a row 3. Unlock one or more specific pieces of content within the row. ## Creating and editing user roles Log into the [Beefree SDK Console](https://developers.beefree.io/) and click on **Manage roles** under Application configuration for the selected application:
In the Manage Roles section you’ll be able to create different user roles and set their permissions. For example, your user roles could be Brand Manager, Account Manager, Junior Editor, etc depending on your needs and nomenclature. For each user role you create, you can set and restrict editing permissions, such as the ability to lock or edit rows and content blocks, as you can see below:
Once you create your user roles you’ll be able to see them listed:
## How to use the Role Hash parameter While **Role Name** is a friendly description of that user role, **Role Hash** is the parameter that identifies that particular role in Beefree SDK. It must be an alphanumeric string between 8 to 30 characters: it can contain letters and numbers, but cannot contain spaces or special characters (such as “-“, “\_”, etc.). You will need to save these role hashes in your application, at the user level – or at the user role level, if you have the concept of “roles” in your application – so that you can retrieve them and pass them to the application when you initialize the builder for that specific user. The property name is: `roleHash`. For user roles to become active in the builder , you will need to add this new property to your Beefree SDK configuration when you configure the builder for a specific user. You will pass: `roleHash: "roleSpecified"` for each of the user, depending on its role. For example, if the Role Hash for a “Junior Editor” is “juniorEditor”, the application configuration will include: `roleHash: "juniorEditor"` Please refer to [configuring the builder](https://docs.beefree.io/beefree-sdk/~/changes/480/getting-started/readme/installation/configuration-parameters) for more details. ## Combination of user roles and permissions This section goes in more details about the various combinations of permissions. It might help you understand how to best put this feature to work in Beefree SDK with regard to locking & unlocking rows and content blocks. First, we created some **hypothetical roles** by using all application combinations of the available user permissions at the row/content level. | Role | Lock rows | Edit locked rows | Lock modules | Edit locked modules | | ------------- | -------------------- | -------------------- | -------------------- | -------------------- | | **admin** | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | **designer** | :x: | :white\_check\_mark: | :x: | :white\_check\_mark: | | **designer2** | :x: | :white\_check\_mark: | :white\_check\_mark: | :white\_check\_mark: | | **copy** | :x: | :x: | :white\_check\_mark: | :white\_check\_mark: | | **modules** | :x: | :x: | :x: | :white\_check\_mark: | | **rows** | :x: | :white\_check\_mark: | :x: | :x: | | **user** | :x: | :x: | :x: | :x: | Then, we created a table with a number of possible “actions” and see which user role would have access to which actions. This allows you to map a certain combination of permissions (from above) to a specific task carried out in the Beefree SDK builder.
Descriptionadmindesignerdesigner2copymodulesrowsuser
Lock/unlock a module✅

❌

widget not provided

✅✅

❌

widget not provided

❌

widget not provided

❌

widget not provided

Lock/unlock a row✅

❌

widget not provided

❌

widget not provided

❌

widget not provided

❌

widget not provided

❌

widget not provided

❌

widget not provided

Add a module to locked row (the module is automatically locked)✅✅✅

❌

can’t drop modules in locked rows

❌

can’t drop modules in locked rows

✅

❌

can’t drop modules in locked rows

Move a locked module from an unlocked row to a locked one✅✅✅

❌

can’t drop modules in locked rows

❌

can’t drop modules in locked rows

✅

❌

module handler not provided

Move a locked module from a locked row to a locked one✅✅✅

❌

module handler not provided

❌

module handler not provided

✅

❌

module handler not provided

Move a locked module from a locked row to an unlocked one✅✅✅

❌

module handler not provided

❌

module handler not provided

✅

❌

module handler not provided

Move a locked module from an unlocked row to an unlocked one✅✅✅✅✅✅

❌

module handler not provided

Move an unlocked module from an unlocked row to a locked one✅✅✅

❌

can’t drop modules in locked rows

❌

can’t drop modules in locked rows

✅

❌

can’t drop modules in locked rows

Move an unlocked module from a locked row to a locked one✅✅✅

❌

module handler not provided

❌

module handler not provided

✅

❌

module handler not provided

Move an unlocked module from a locked row to an unlocked one✅✅✅

❌

module handler not provided

❌

module handler not provided

✅

❌

module handler not provided

Move an unlocked module from an unlocked row to an unlocked one✅✅✅✅✅✅✅
Move a locked row✅✅✅

❌

row handler not provided

❌

row handler not provided

✅

❌

row handler not provided

Move an unlocked row✅✅✅✅✅✅✅
Delete/duplicate a locked module in locked row✅✅✅

❌

show warning

❌

show warning

✅

❌

show warning

Delete/duplicate an unlocked module in locked row✅✅✅

❌

show warning

❌

show warning

✅

❌

show warning

Delete/duplicate a locked module in unlocked row✅✅✅✅✅✅

❌

show warning

Delete/duplicate an unlocked module in unlocked row✅✅✅✅✅✅✅
Delete/duplicate unlocked row containing locked modules✅✅✅✅✅

❌

show error

❌

show error

Delete/duplicate locked row✅✅✅

❌

show warning

❌

show warning

✅

❌

show warning

Change properties of a locked module✅✅✅✅✅

❌

show warning

❌

show warning

Change properties of an unlocked module✅✅✅✅✅✅✅
Change text of a text/button locked module✅✅✅✅✅

❌

show warning

❌

show warning

Change text of a text/button unlocked module✅✅✅✅✅✅✅
Add an image to a locked image module✅✅✅✅✅

❌

show warning

❌

show warning

Add an image to an unlocked image module✅✅✅✅✅✅✅
Change properties of a locked row✅✅✅

❌

show warning

❌

show warning

✅

❌

show warning

Change properties of an unlocked row✅✅✅✅✅✅✅
## User roles & display conditions If you use [*Display Conditions*](https://docs.beefree.io/beefree-sdk/~/changes/480/other-customizations/advanced-options/display-conditions) in your builder application, then you can use additional user roles to control the access users have to creating and editing [*Display Conditions*](https://docs.beefree.io/beefree-sdk/~/changes/480/other-customizations/advanced-options/display-conditions)*.*