Cms: User permissions for Multisite Setup

[conradfuhrman]

Bug Description

When multisite is enabled there is no way to localize a user to a specific site and/or restrict them from accessing other sites as needed.

How to Reproduce

Create a multisite Statamic with multiple sites, then add a user and try to restrict them to a single site.

Statamic version: 3.0.17
PHP version: 7.4

Install method (choose one):

• Fresh install from statamic/statamic

Ideally if multisite is used it would be nice to have additional permissions added to the roles to ensure the following:

• A role to establish who can add access to sites
• From the users levels, a site field (which technically is already there) to select what sites a user has access to
• Possibly separate users for each site for control so it's not in a global setting except for a super admin.

If this is already possibly I have not found the documentation for it. Thanks in advance!

[duncanmcclean]

I'd probably consider this to be an improvement to an existing feature, rather than a bug. Could one of the Statamic Team move this issue to the statamic/ideas repository?

[conradfuhrman]

Thanks @damcclean, is there anyway to disable/limit the site switching or tie into the existing permission system to alter what a user can see in the admin for multisite as currently it only looks like a Boolean exists for the site dropdown. Happy to continue this on the ideas repo once moved. But this is a huge blocker for several of our clients right now unfortunately.

[duncanmcclean]

I've just had a look through the permissions on my test multi-site and I can't see any permissions related to site switching so I'd assume it's not something that's currently possible. However, I see that could come in useful in some use cases.

[conradfuhrman]

Yeah, one of clients on our most trafficked sites has 7 languages that they need to isolate from a user perspective. If we knew how to tie into the existing system we would do it instantly, but we're still pretty green with how to override core admin items in this area.

[sheldonkotyk]

+1 to this. My request would be that a superadmin has access, otherwise a role would be associated to a specific site. So a user can be an editor in one, a member in another, and potentially banned in another... etc.

[dambridge]

+1

[j3ll3yfi5h]

+1

[duncanmcclean]

The best way to upvote issues is to leave a 👍 reaction to the issue. That way the gents can filter issues by most thumbs up so they know what to work on. 😄

[dambridge]

@damcclean Done, cheers!

[github-actions[bot]]

This issue has not had recent activity and has been marked as stale — by me, a robot. Simply reply to keep it open and send me away. If you do nothing, I will close it in a week. I have no feelings, so whatever you do is fine by me.

[sheldonkotyk]

Still needed.