Authorization defines the actions a user can perform on a particular piece of content. The CMS uses the following pieces of data to provide authorization:

User account: A unique account for each user of the CMS. This account must match the account used for authentication. For example, if the user Marcel Duchamp uses the Windows domain account university\mduchamp to authenticate, the Ingeniux account must also be university\mduchamp.

User groups: Sets of users organized by function and assigned permissions to access content.

Group permissions: Enable system actions by group. For example, an entire group might have permission to add a page type to workflow.

Node-level security: Defines, by group, who may access and modify a particular node in the site tree. Node-level access can be inherited from parent pages.

Workflows: Define the way pages move from user to user through the CMS. A particular workflow manages one type of page. 

Page Creation Rules: Define the process of page creation. These rules can determine:

• Which groups may use a particular rule
• The page schema from which to create the page
• The style sheet the page should use
• Where the page should be created
• Whether the page should be entered into a particular workflow.

A page creation rule is associated with a particular node in the site tree.

Node-level rules application: Defines the page creation rules that apply to particular nodes. Page creation rules can be inherited from parent nodes.

The CMS uses the following utilities to manage authorization:

• Users/Groups Manager: Manages users, groups, and group permissions
• Page Properties dialog: Defines access to nodes in the site tree based on user group and page creation rules. The Page Properties dialog provides access to the Page Creation Rules tab and the Page Security tab. 
• Workflow Manager: Manages workflows, which define how a page moves through the CMS, from creation to publication
• Page Creation Rules Manager: Manages page creation rules, which define the creation of new pages

This section includes:

• Managing Asset Security
• Setting Page, Component, or Folder Security