Permission concept

The authorization concept at TUM is based on predefined permission groups. Each backend user is assigned to one or more of these groups—this determines what they are allowed to do in the backend.

Editor

An editor can create, edit, or delete content elements for all pages of the website.

• Can create, edit, and delete content elements
• Cannot create or delete pages
• Typically suited for users who are responsible solely for maintaining content

Manager

A manager can create, edit, or delete pages and content elements across the entire website.

• Includes all editor permissions
• Can additionally create, edit, and delete pages
• Typically suited for users with broader responsibilities

Groupdelegation

This permission group enables the management of user accounts and permission groups (chief editorial level). It is assigned exclusively by the TYPO3 team.

Additional permission groups

Gropu	Function
fp (Functional pages)	Access to special pages such as Imprint and Contact
news	Permission to create and edit news articles
readonly	Read-only access for preview purposes without editing rights

Chief editorial team

Chief editors have the group delegation permission and serve as the primary point of contact for user accounts.

Responsibilities:

• Activate (enable) new user accounts
• Assign and remove permission groups
• Deactivate accounts of former staff members

Limitations: Chief editors can only assign predefined groups – they cannot create custom permissions.

Special permissions: Access to the recycler (restore deleted content, 400-day retention period)

Rights at a glance

Action	Editor	Manager	Chief editorial
Create/edit content elements	x	x	x
Delete content elements	x	x	x
Create pages	-	x	x
Delete pages	-	x	x
Manage user accounts	-	-	x
Use recycler	-	-	x