We can see how you can limit types of actions for a colloborator on a model, with Role Can, but for some reason we cannot figure out how to prevent a collobaorator from even viewing certain models? Basically, what we want is that colloborator logs in and only sees the models he is allowed to see and interact with and not any of the other models. how do you do this?
Hi @osseonews,
When you edit a role’s content permissions in your project settings, you can add model-specific rules for them. You can either:
DENY them the ability to do anything on a certain model:
Or, conversely, if they’re not inheriting from another role (i.e. you’re building up a role’s permissions from scratch), you can build up permissions one at a time by explicitly defining what they have access to:
You can also mix and match as necessary, such as inheriting from another role but then adding another deny and yet another allow, etc.
More about that in the documentation: Project collaborators, roles and permissions — General concepts — DatoCMS
Does that help? If something is still unclear, please let me know. If you can link to a specific role inside a specific project, I can provide a more concrete example too 