Permission Levels: Editorial and Advanced Response

Access permissions always involve issues of security and legal requirements, because they determine who is allowed to do what in the system. Training reduces risks associated with operational errors, knowledge gaps, and behavior that compromises security.

Permission Level 1: Standard Editor (Low Risk)

This level includes individuals who are permitted to edit only individual pieces of content on existing pages. They work exclusively within predefined structures and have no influence over navigation or site architecture. This group is responsible for maintaining content within a predefined framework, without making changes to technical or structural elements.

Permitted Actions:

• Update text: Edit, supplement, and correct existing page content.
• Editing headings: Inserting and adjusting meaningful headings and subheadings.
• Embed images: Upload, replace, and integrate images and graphics into text.
• Maintain links: Insert, update, and verify the functionality of internal and external links.
• Create link lists: Organize additional information into clear, easy-to-navigate link lists.
• Maintain image galleries: Compile multiple images into a gallery and update them.
• Design teasers: Present important information using existing highlighting and teaser elements.
• Structure content: Use text-image combinations, accordions, and simple column layouts.
• Use quote elements: Display statements and quotes using the provided design elements.
• Keep existing content up to date: Correct outdated information, replace individual content elements, and check the presentation.

Prohibited Actions:

• Do not create, delete, or move pages
• Do not make changes to navigation structures
• No administrative control of plugins

Risk profile:
This level involves low risk, as errors are limited to individual pieces of content and have no impact on security or structure. Liability risks are minimal, provided that basic standards (e.g., accessibility, copyright) are adhered to.

Authorization Level 2: Advanced Editing (medium risk)

This level includes individuals who, in addition to content editing, are also responsible for maintaining and further developing individual, medium-sized web sections up to the size of a department or comparable unit . They work in depth on page structures, navigation, page properties, and advanced editorial elements. Edits are made exclusively within the assigned area. The job profile requires a higher level of technical understanding as well as an awareness of the impact on user guidance, accessibility, and discoverability, as well as risks related to data loss.

Permitted Actions

• Create new pages within your own structure
• Move, copy, hide, or delete pages
• Edit page properties (title, visibility, settings)
• Working with the News plugin
• Retrieving form data
• Translations

Prohibited actions

• No impact on overall architecture
• No use of the People plugin
• No creation of forms
• No interference with automatic translations

Risk Profile This level involves moderate risk, as structural changes can have a direct impact on user navigation, content consistency, and the visibility of the website. Errors can affect entire page branches but are limited to the respective area of responsibility. Care, a thorough understanding of the system, and strict adherence to established standards are therefore absolutely essential.