Use passports, privileges, and roles to set what your users can and can't do.
There are two types of privileges you can assign users: administrative and editorial.
Administrative privileges determine what a user can configure and manage, such as their personal account, other users, and website content. Administrative privileges are assigned by passport.
Editorial privileges are assigned by role. These roles determine what content areas of the site users have permission to edit.
Users must have an administrative passport to be assigned editorial roles. For example, the Registered User passport.
