Piranha doesn't really care how your users gets authenticated, whether it's the end users of your application or the administrators accessing the manager interface. Instead, Piranha uses a claims based security model to check what the current user has access to.
We provide two different packages for handling authentication, one for development and one for production scenarios.
To read more about how the implement custom authentication services for your application, please refer to Authentication under the Extensions section.
The core Piranha application has two Claims that are used when trying to preview unpublished content.
THe following claims define the different actions the logged in user can perform in the manager interface. To assign these claims to different users you setup
Roles which have access to different
Claims. A user can have several roles.
PiranhaAdminIf the user has access to the manager interface
PiranhaAliasesIf the user can view the alias page
PiranhaAliasesDeleteIf the user can delete existing aliases
PiranhaAliasesEditIf the user can add and edit existing aliases
PiranhaConfigIf the user can view the config page
PiranhaConfigEditIf the user can update config settings
PiranhaMediaIf the user can view the media page
PiranhaMediaAddIf the user can upload new media
PiranhaMediaDeleteIf the user can delete existing media
PiranhaMediaEditIf the user can update existing media
PiranhaMediaAddFolderIf the user can add new folders in the media library
PiranhaMediaDeleteFolderIf the user can delete existing media folders
PiranhaPagesIf the user can view the page structure
PiranhaPagesAddIf the user can add new pages
PiranhaPagesDeleteIf the user can delete existing pages
PiranhaPagesEditIf the user can view the page details
PiranhaPagesPublishIf the user can publish and unpublish pages
PiranhaPagesSaveIf the user can update existing pages
PiranhaPostsIf the user can view posts
PiranhaPostsAddIf the user can add new posts
PiranhaPostsDeleteIf the user can delete existing posts
PiranhaPostsEditIf the user can view the post details
PiranhaPostsPublishIf the user can publish and unpublished posts
PiranhaPostsSaveIf the user can update existing posts
PiranhaSitesIf the user can view the site page
PiranhaSitesAddIf the user can add new sites
PiranhaSitesDeleteIf the user can delete existing sites
PiranhaSitesEditIf the user can view site details
PiranhaSitesSaveIf the user can update existing sites