Allow non-admins to manage XMS Systems site pages
Discussion on how to give registered members that are not administrators access to the website to edit selected pages without having access to the administration section.
The question that needs answering first is “Why would you want to allow non-admins to edit selected site pages”?
There could be a number of reasons for example;
- The number of pages on your website is simply to many to manage by yourself
- You are waiting for page content and it will only be available while you are away on holidays and it absolutely have to be published.
- You delegated certain section of the website to be maintained by someone else
- You might want to “sell” space on your website
To allow access will take a number of steps to ensure security is maintained and it is easy to revoke the access once done.
Requirements.
- The page in question should already exist. Even if it only contains a basic template
- The person that needs access needs to be registered and have an active account with your website.
- Ensure the “Site Pages” option is available in the “Member Menu” (Member Menu item 19)
For security sake, make sure the “Access level” is set to a level higher than the “normal” member access level.
- You need to have access to the following sections of the administration section
- Dashboard > Members > Member List
- Dashboard > Website Configuration > Security > Page Admins
- Dashboard > Website Configuration > Member Menu
How to do it.
- Create the page if it is not already done
Admin > Site Dashboard > Manage Site Content > My Pages > Scroll down and click the green “add new” button
- Find the member profile
Admin > Site Dashboard > Members > Member List > click the blue “edit” button to manage the member
- Update Member Account Settings
- Scroll down to the “Account Settings" section of the member profile and
- locate “Access Level” and set this to the same as the “Site Pages” (the member menu) menu option
- locate the “Site Page Admin” radio group. Select “Yes”
- Scroll down and click “Update” to save the new account settings for the member.
- “Share the Page to the selected member”
- Dashboard > Website Configuration > Security > Page Admins
- You should see a list of “Page Admins”
- Locate the new “Page Admin” and click “edit”
- Click the page in the left column you want to “share” followed by a click on the “right arrow” to move the page over to the right column
- Share as many pages as you need to
- Click “Update” at the bottom of the page
- Notify the user
Contact the delegated member and ask them to log out from your website and back in. They should see a new option to manage site pages in their Member Section once logged in.
Revoking access
It is important to remember to revoke access to the page if and when it is no longer required.
- Un-share the Page
Dashboard > Website Configuration > Security > Page Admins
Locate the “Page Admin” and remove the page from the right column
- Edit the member profile
- and update the “Access Level” to the appropriate level
- Set the “Site Page Admin” option to “No”
- Update the profile to save the changes
The minimum you need to do is to update the member profile and set “Site Page Admin” to “No”. This will force an error when the member tries to access the “Site Pages” menu option from within his/her member section.
Note:
- Make sure to keep an eye on the page and content to ensure the content and layout are in line with the rest of the website.
- There are always a risk when giving access to more people to manage certain things on your website. More members with advanced access means more passwords that can be potentially stolen and access gained by hackers.
- Remember to revoke the access when it is no longer required