Specifying permissions for certain areas of site independent of other areas

Topics: Customizing Orchard, General, Writing modules
Apr 22, 2014 at 7:11 PM
In my scenario, I will have students and 12 administrators. I want the students to be able to manage the content they enter. And I want each of the 12 administrators to be able to manage the content they enter and see the content of the other administrators but not be able to edit it. They should only be able to edit their own data that they enter into the system. The 12 administrators will be distinguished by an institution field stored in the DB related to the user.

1) Is this currently possible in Orchard 1.8?
2) I am going to be creating a custom module for the entry and display of these administrators information. Can I accomplish this security feature by extending the AuthorizationEventHandler?

Thanks in advance for your help.
Apr 26, 2014 at 5:18 PM
1) Yes, with permissions and roles.
2) You can accomplish this and you don't need to do anything with AuthorizationEventHandler: setting up the correct permissions and then using IAuthorizer to check for them will be enough.