Default Security Domains - BloomReach Experience - Open Source CMS

This article covers a Hippo CMS version 11. There's an updated version available that covers our most recent release.

04-07-2016

Default Security Domains

A Hippo project created using the Maven archetype includes the following default security domains:

autoexport

Automatic export configuration.

brokenlinks

Broken links report.

defaultread

Nodes and node types that every user can read. For example, each CMS user can read the documents created by themselves (matched by username).

defaultwrite

Nodes and node types that every CMS user can write. For example, each CMS user can write to the documents they created themselves (matched by username), and write to their own user account details (also matched by username).

everywhere

All nodes in the content repository. For example admin users have full access to all nodes.

formdata

Form data stored in the repository (typically under /formdata). The delivery tier must have write access to this domain.

frontendconfig

CMS user interface configuration.

hippodocuments

All documents.

hippofolders

All folders.

hippogallery

All image sets.

hippolog

All nodes in the repository event log (typically stored under /hippo:log).

hippomodules

All module configuration nodes (typically stored under /hippo:configuration/hippo:modules).

hipporequests

All workflow requests (e.g. request for publication, request for deletion). Authorization within this domain determines what a user can do with the request, e.g. editor can approve or reject, while authors can only cancel a request.

hstconfig

The delivery tier configuration (typically stored under /hst:hst). In addition to the delivery tier being able to read the configuration, webmaster-level users must have write access to be able to make changes in the channel manager.

htmlcleaner

Rich text fields HTML cleaner configuration.

live-documents

All documents that are published. Used to display content in live channels.

preview-documents

All documents that are not published, and documents with unpublished changes. Used to preview unpublished content in the channel manager.

templates

Document type definitions including editing templates (typically stored under /hippo:namespaces).

versioning

Document version histories.

webfiles

Web Files.

workflow

Workflow configuration.

 

Did you find this page helpful?
How could this documentation serve you better?
On this page
    Did you find this page helpful?
    How could this documentation serve you better?