Permissions let you control what users can do on your site. Each user role (defined on the user roles page) has its own set of permissions. For example, you could give users classified as "Administrators" permission to "administer nodes" but deny this power to ordinary, "authenticated" users. You can use permissions to reveal new features to privileged users (those with subscriptions, for example). Permissions also allow trusted users to share the administrative burden of running a busy site.

If you assign a permission to an anonymous user, the permission is not inherited by other roles. However, any permissions you assign to the Authenticated User role are inherited by other logged in users. For example, if you give the Anonymous role the permission to post comments, it does not mean that the Authenticated User role also gains permission to post comments. However, if you give the Authenticated User permission to post comments, it does mean that other roles you have created will automatically gain that permission.

Comments

chadhester’s picture

This page is an explanation of many core permission options: http://drupal.org/node/132202

Thanks Drupal community for being so helpful and getting us all closer to RULING THE WORLD!!! :)

__________
Regards,
Chad Hester

tcheard’s picture

However, if you give the Authenticated User permission to post comments, it does mean that other roles you have created will automatically gain that permission.

This is slightly wrong, because although it is correct that all logged in users get permissions if they are given to the 'Authenticated User' role, it is not because "other roles you have created will automatically gain that permission", it is because every logged in user has the 'Authenticated User' role, not because their other roles have received the permission.

atheis’s picture

What is the difference between using "Admin all reservations" and checking off permissions for all content types? Is there any or is this a shortcut to those same permissions?