Security · Question 8 of 12
What is good practice for granting access permissions to editors in TYPO3?
2 answers are correct. Easy
Show answer
Answer
- A Via backend user groups instead of individually for each user
- C Only with the permissions, pages and modules that are really needed for the job
Explanation
The TYPO3 security guidelines recommend the principle of least privilege: everyone only gets the modules, pages, file mounts and tables they need, which keeps the backend clearer and limits the damage if an account is compromised. Permissions are defined in backend user groups such as "Editors", and new users are simply assigned to the group; changes then apply to everyone at once. Shared accounts are problematic because the log no longer shows who changed what, and because you cannot revoke access for a single person.