Core Roles and Permissions: Content Library

Core Roles and Permissions: Content Library#

This document outlines the built-in roles and permissions associated with the Content Library feature in the Open edX platform.

Roles#

A role is a set of permissions that defines what actions a user can perform. When you grant a role to a user, you assign it within a specific scope, which determines where those permissions apply. Here is the list of default roles for Libraries.

  • The Library Admin has full control over the library, including managing users, modifying content, and handling publishing workflows. They ensure content is properly maintained and accessible as needed.

  • The Library Author is responsible for creating, editing, and publishing content within a library. They can manage tags and collections but cannot delete libraries or manage users.

  • The Library Contributor can create and edit content within a library but cannot publish it. They support the authoring process while leaving final publishing to Authors or Admins.

  • The Library User can view and reuse content but cannot edit or delete anything.

Note

Global staff and superusers are like Library Admins on all libraries (they have full permissions across all content libraries by default).

Permissions#

The following permissions are associated with the content library roles:

Library Permissions#

  • View the library (content_libraries.view_library): Allows users to view the content library.

  • Manage library tags (content_libraries.manage_library_tags): Allows users to manage the tags associated with library items.

  • Delete the library (content_libraries.delete_library): Allows users to delete the entire content library.

Library Content Permissions#

  • Edit library content (content_libraries.edit_library_content): Allows users to edit existing content within the library.

  • Publish library content (content_libraries.publish_library_content): Allows users to publish content to or from the library.

  • Reuse library content (content_libraries.reuse_library_content): Allows users to reuse content from the library in other contexts.

Library Team Permissions#

  • View the library team (content_libraries.view_library_team): Allows users to view the list of users or roles associated with the library.

  • Manage the library team (content_libraries.manage_library_team): Allows users to add, remove, or change the roles of users in the library team.

Library Collections Permissions#

  • Create library collections (content_libraries.create_library_collection): Allows users to create new collections within the library.

  • Edit library collections (content_libraries.edit_library_collection): Allows users to modify existing collections within the library.

  • Delete library collections (content_libraries.delete_library_collection): Allows users to delete collections within the library.

Permissions Inheritance#

  • Managing library tags (content_libraries.manage_library_tags) implies editing library content (content_libraries.edit_library_content).

  • Deleting the library (content_libraries.delete_library) implies editing library content (content_libraries.edit_library_content).

  • Publishing library content (content_libraries.publish_library_content) implies editing library content (content_libraries.edit_library_content).

  • Editing library content (content_libraries.edit_library_content) implies viewing the library (content_libraries.view_library).

  • Reusing library content (content_libraries.reuse_library_content) implies viewing the library (content_libraries.view_library).

  • Publishing library content (content_libraries.publish_library_content) implies viewing the library (content_libraries.view_library).

  • Managing the library team (content_libraries.manage_library_team) implies viewing the library team (content_libraries.view_library_team).

  • Deleting a library collection (content_libraries.delete_library_collection) implies editing a library collection (content_libraries.edit_library_collection).

  • Creating a library collection (content_libraries.create_library_collection) implies editing a library collection (content_libraries.edit_library_collection).

  • Editing a library collection (content_libraries.edit_library_collection) implies viewing the library (content_libraries.view_library).

Roles and Permissions Summary Table#

Matrix of Content Library Roles and Permissions#

Permissions

Library Admin

Library Author

Library Contributor

Library User

Library

content_libraries.view_library

✅

✅

✅

✅

content_libraries.manage_library_tags

✅

✅

✅

❌

content_libraries.delete_library

✅

❌

❌

❌

Content

content_libraries.edit_library_content

✅

✅

✅

❌

content_libraries.publish_library_content

✅

✅

❌

❌

content_libraries.reuse_library_content

✅

✅

✅

✅

Team

content_libraries.view_library_team

✅

✅

✅

✅

content_libraries.manage_library_team

✅

❌

❌

❌

Collections

content_libraries.create_library_collection

✅

✅

✅

❌

content_libraries.edit_library_collection

✅

✅

✅

❌

content_libraries.delete_library_collection

✅

✅

✅

❌

Maintenance chart

Review Date

Working Group Reviewer

Release

Test situation

2025-10-13

RBAC Project

Ulmo

TO DO