Access Rights (ACL)

Access rights (ACL) in Joomla control which actions user groups can perform. They form the second pillar of access control alongside access levels.

  • Function and Purpose

    The ACL (Access Control List) specifies who is allowed to perform which actions. Actions include things like “View”, “Create”, “Edit” or “Delete”. You can assign permissions per component, category or article.

    Permission Structure

    • Actions: Defined operations like View, Create, Edit, Delete.
    • User groups: Permissions are assigned to groups; users inherit them.
    • Inheritance: Permissions can be inherited from parent groups or explicitly overridden.

    Joomla’s ACL is highly flexible. In addition to the predefined default groups (such as “Author”, “Editor”, or “Administrator”), you can create your own custom groups with tailored permissions — for example, dedicated editor teams or project-specific roles. This allows you to adapt the permission system precisely to your site’s internal workflows.

    Important Notes

    • Default permissions: Joomla defines default permissions that you can customize.
    • Clarity: Avoid conflicting permissions by keeping group structures clear.
    • Granularity: Permissions can be defined down to the article level, but avoid making them overly granular.

    Further information: You can find a detailed introduction to Joomla’s ACL in the official documentation and the Joomla Manual.

    See also