# ACL for specific entities

**URL:** <https://discourse.getcockpit.com/t/acl-for-specific-entities/327>\
**Category:** Support\
**Created:** [October 11, 2018, 1:02pm UTC](https://discourse.getcockpit.com/t/acl-for-specific-entities/327 "2018-10-11T13:02:25Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![raffaelj](https://yyz2.discourse-cdn.com/flex030/user_avatar/discourse.getcockpit.com/raffaelj/32/331_2.png) [@raffaelj](https://discourse.getcockpit.com/u/raffaelj)\
**Post date:** [October 12, 2018, 11:13am UTC](https://discourse.getcockpit.com/t/acl-for-specific-entities/327/2 "2018-10-12T11:13:59Z")

</div>

You can define permissions for groups in the collection settings for each collection individually. You don’t have to give global rights to user groups.

In the permissions tab you can set individual rules via PHP.

See this thread for some more explanations:

> [@Permission Documentation](https://discourse.getcockpit.com/t/permission-documentation/201):
>
> Hi, I want to use cockpit for a project because I think it’s pretty awesome but I’ve got some questions about the permission section of collections, is there any documentation, because I not sure how to use the „Create“ etc. sections. Any help would be appreciated. Thanks in advance.

For granular user and read permissions, write your own rules in PHP. Some inspiration here:

> [@Restrict content to the content authors](https://discourse.getcockpit.com/t/restrict-content-to-the-content-authors/285):
>
> I want my users to be able to view and edit only collection posts they have created. Is this something I would implement in the config file or programmatically? If so, any help would be much appreciated. Also, I will have a hidden boolean field created on each collection post only accessible by admions. Once that field is set to true only admins should be able to see/edit that post. This access to author’s own content will be more restrictive than just user groups.

---

_[View the full topic](https://discourse.getcockpit.com/t/acl-for-specific-entities/327)._