.. _Roles Permissions Content Library:

Core Roles and Permissions: Content Library
#############################################

This document outlines the built-in roles and permissions associated with the Content Library feature in the Open edX platform.

.. contents::
    :depth: 2
    :local:

.. _Library Roles:

Roles
-----

A **role** is a set of permissions that defines what actions a user can perform. When you **grant a role to a user**, you assign it within a specific scope, which determines where those permissions apply. Here is the list of default roles for Libraries.

- The **Library Admin** has full control over the library, including managing users, modifying content, and handling publishing workflows. They ensure content is properly maintained and accessible as needed.

- The **Library Author** is responsible for creating, editing, and publishing content within a library. They can manage tags and collections but cannot delete libraries or manage users.

- The **Library Contributor** can create and edit content within a library but cannot publish it. They support the authoring process while leaving final publishing to Authors or Admins.

- The **Library User** can view and reuse content but cannot edit or delete anything.

.. note::

   Global staff and superusers are like Library Admins on all libraries (they have full permissions across all content libraries by default).

Permissions
-----------

The following permissions are associated with the content library roles:

Library Permissions
=======================

- **View the library** (``content_libraries.view_library``): Allows users to view the content library.
- **Manage library tags** (``content_libraries.manage_library_tags``): Allows users to manage the tags associated with library items.
- **Delete the library** (``content_libraries.delete_library``): Allows users to delete the entire content library.


Library Content Permissions
===============================

- **Edit library content** (``content_libraries.edit_library_content``): Allows users to edit existing content within the library.
- **Publish library content** (``content_libraries.publish_library_content``): Allows users to publish content to or from the library.
- **Reuse library content** (``content_libraries.reuse_library_content``): Allows users to reuse content from the library in other contexts.


Library Team Permissions
=============================

- **View the library team** (``content_libraries.view_library_team``): Allows users to view the list of users or roles associated with the library.
- **Manage the library team** (``content_libraries.manage_library_team``): Allows users to add, remove, or change the roles of users in the library team.


Library Collections Permissions
===================================

- **Create library collections** (``content_libraries.create_library_collection``): Allows users to create new collections within the library.
- **Edit library collections** (``content_libraries.edit_library_collection``): Allows users to modify existing collections within the library.
- **Delete library collections** (``content_libraries.delete_library_collection``): Allows users to delete collections within the library.

Permissions Inheritance
========================

* **Managing library tags** (``content_libraries.manage_library_tags``) implies **editing library content** (``content_libraries.edit_library_content``).
* **Deleting the library** (``content_libraries.delete_library``) implies **editing library content** (``content_libraries.edit_library_content``).
* **Publishing library content** (``content_libraries.publish_library_content``) implies **editing library content** (``content_libraries.edit_library_content``).
* **Editing library content** (``content_libraries.edit_library_content``) implies **viewing the library** (``content_libraries.view_library``).
* **Reusing library content** (``content_libraries.reuse_library_content``) implies **viewing the library** (``content_libraries.view_library``).
* **Publishing library content** (``content_libraries.publish_library_content``) implies **viewing the library** (``content_libraries.view_library``).
* **Managing the library team** (``content_libraries.manage_library_team``) implies **viewing the library team** (``content_libraries.view_library_team``).
* **Deleting a library collection** (``content_libraries.delete_library_collection``) implies **editing a library collection** (``content_libraries.edit_library_collection``).
* **Creating a library collection** (``content_libraries.create_library_collection``) implies **editing a library collection** (``content_libraries.edit_library_collection``).
* **Editing a library collection** (``content_libraries.edit_library_collection``) implies **viewing the library** (``content_libraries.view_library``).

.. _Library RP Summary Table:

Roles and Permissions Summary Table
------------------------------------

.. START LIBRARY RP TABLE:

.. table:: Matrix of Content Library Roles and Permissions
   :widths: auto

   ============================================= ================= ================ ===================== ==============
   Permissions                                   Library Admin     Library Author   Library Contributor   Library User
   ============================================= ================= ================ ===================== ==============
   **Library**
   --------------------------------------------- ----------------- ---------------- --------------------- --------------
   content_libraries.view_library                ✅                ✅               ✅                    ✅
   content_libraries.manage_library_tags         ✅                ✅               ✅                    ❌
   content_libraries.delete_library              ✅                ❌               ❌                    ❌
   **Content**
   --------------------------------------------- ----------------- ---------------- --------------------- --------------
   content_libraries.edit_library_content        ✅                ✅               ✅                    ❌
   content_libraries.publish_library_content     ✅                ✅               ❌                    ❌
   content_libraries.reuse_library_content       ✅                ✅               ✅                    ✅
   **Team**
   --------------------------------------------- ----------------- ---------------- --------------------- --------------
   content_libraries.view_library_team           ✅                ✅               ✅                    ✅
   content_libraries.manage_library_team         ✅                ❌               ❌                    ❌
   **Collections**
   --------------------------------------------- ----------------- ---------------- --------------------- --------------
   content_libraries.create_library_collection   ✅                ✅               ✅                    ❌
   content_libraries.edit_library_collection     ✅                ✅               ✅                    ❌
   content_libraries.delete_library_collection   ✅                ✅               ✅                    ❌
   ============================================= ================= ================ ===================== ==============

.. END LIBRARY RP TABLE

**Maintenance chart**

+--------------+-------------------------------+----------------+--------------------------------+
| Review Date  | Working Group Reviewer        | Release        | Test situation                 |
+--------------+-------------------------------+----------------+--------------------------------+
| 2025-10-13   | RBAC Project                  | Ulmo           | TO DO                          |
+--------------+-------------------------------+----------------+--------------------------------+