# ACL for specific entities

**URL:** <https://discourse.getcockpit.com/t/acl-for-specific-entities/327>\
**Category:** Support\
**Created:** [October 11, 2018, 1:02pm UTC](https://discourse.getcockpit.com/t/acl-for-specific-entities/327 "2018-10-11T13:02:25Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![guarana](https://avatars.discourse-cdn.com/v4/letter/g/db5fbb/32.png) [@guarana](https://discourse.getcockpit.com/u/guarana)\
**Post date:** [October 11, 2018, 1:02pm UTC](https://discourse.getcockpit.com/t/acl-for-specific-entities/327/1 "2018-10-11T13:02:25Z")

</div>

Is it possible to setup ACL to allow access to only certain collections, regions etc. instead of just all collection, regions etc…  
Or can I just limit access to types of entities?

---

<div class="post-metadata">

**Author:** ![raffaelj](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.getcockpit.com/raffaelj/32/331_2.png) [@raffaelj](https://discourse.getcockpit.com/u/raffaelj)\
**Post date:** [October 12, 2018, 11:13am UTC](https://discourse.getcockpit.com/t/acl-for-specific-entities/327/2 "2018-10-12T11:13:59Z")

</div>

You can define permissions for groups in the collection settings for each collection individually. You don’t have to give global rights to user groups.

In the permissions tab you can set individual rules via PHP.

See this thread for some more explanations:

> [@Permission Documentation](https://discourse.getcockpit.com/t/permission-documentation/201):
>
> Hi, I want to use cockpit for a project because I think it’s pretty awesome but I’ve got some questions about the permission section of collections, is there any documentation, because I not sure how to use the „Create“ etc. sections. Any help would be appreciated. Thanks in advance.

For granular user and read permissions, write your own rules in PHP. Some inspiration here:

> [@Restrict content to the content authors](https://discourse.getcockpit.com/t/restrict-content-to-the-content-authors/285):
>
> I want my users to be able to view and edit only collection posts they have created. Is this something I would implement in the config file or programmatically? If so, any help would be much appreciated. Also, I will have a hidden boolean field created on each collection post only accessible by admions. Once that field is set to true only admins should be able to see/edit that post. This access to author’s own content will be more restrictive than just user groups.

---

<div class="post-metadata">

**Author:** ![serjoscha87](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.getcockpit.com/serjoscha87/32/151_2.png) [@serjoscha87](https://discourse.getcockpit.com/u/serjoscha87)\
**Post date:** [October 12, 2018, 4:49pm UTC](https://discourse.getcockpit.com/t/acl-for-specific-entities/327/3 "2018-10-12T16:49:57Z")

</div>

as already mentioned by raffaelj groups are what you are looking for

try this addon: [https://github.com/serjoscha87/cockpit\_GROUPS](https://github.com/serjoscha87/cockpit_GROUPS)