> ## Documentation Index
> Fetch the complete documentation index at: https://docs.parvej.me/llms.txt
> Use this file to discover all available pages before exploring further.

# Permissions

> Configure collection and bucket permissions in Appwrite

# Permissions Setup

## Understanding Permissions

Appwrite uses role-based permissions:

| Role      | Description                              |
| --------- | ---------------------------------------- |
| `Any`     | Anyone (including unauthenticated users) |
| `Users`   | Any authenticated user                   |
| `Guests`  | Unauthenticated users only               |
| `User:ID` | Specific user by ID                      |

## Collection Permissions

### Public Content (Read-Only)

For collections that visitors can view but only admins can edit:

**Collections:** `blogs`, `projects`, `products`, `blog_categories`, `project_categories`, `shop_categories`, `header_section`, `about_me`, `menubar_settings`

| Permission | Role  |
| ---------- | ----- |
| Read       | Any   |
| Create     | Users |
| Update     | Users |
| Delete     | Users |

### Private Content

For collections with sensitive data:

**Collections:** `orders`, `shortlink_analytics`

| Permission | Role  |
| ---------- | ----- |
| Read       | Users |
| Create     | Users |
| Update     | Users |
| Delete     | Users |

### Admin-Only Content

**Collections:** `shortlinks`, `shortlink_domains`, `custom_fonts`

| Permission | Role  |
| ---------- | ----- |
| Read       | Any   |
| Create     | Users |
| Update     | Users |
| Delete     | Users |

## Setting Permissions in Console

<Steps>
  <Step title="Open Collection">
    Go to **Databases** → `portfolio_db` → Select collection
  </Step>

  <Step title="Go to Settings">
    Click the **Settings** tab
  </Step>

  <Step title="Configure Permissions">
    Under **Permissions**, click **Add Role** and set:

    * Select role (Any, Users, etc.)
    * Check permissions (Read, Create, Update, Delete)
  </Step>

  <Step title="Save">
    Click **Update** to save changes
  </Step>
</Steps>

## Storage Bucket Permissions

### Public Buckets (Images)

For image buckets that need public viewing:

| Permission | Role  |
| ---------- | ----- |
| Read       | Any   |
| Create     | Users |
| Update     | Users |
| Delete     | Users |

### Private Buckets

For `order-files` bucket:

| Permission | Role  |
| ---------- | ----- |
| Read       | Users |
| Create     | Users |
| Update     | Users |
| Delete     | Users |

## Document-Level Security

For orders, you may want document-level security so users can only see their own orders:

1. Enable **Document Security** in collection settings
2. When creating an order, set permissions:

```javascript theme={null}
await databases.createDocument(
  'portfolio_db',
  'orders',
  ID.unique(),
  orderData,
  [
    Permission.read(Role.user(userId)),
    Permission.update(Role.user(userId))
  ]
);
```

## Platform Configuration

Don't forget to add your domains to **Settings** → **Platforms**:

| Platform | Hostname                 |
| -------- | ------------------------ |
| Web      | `localhost`              |
| Web      | `your-domain.vercel.app` |
| Web      | `yourdomain.com`         |

<Warning>
  Without platform configuration, your frontend cannot communicate with Appwrite (CORS errors).
</Warning>