Authors should not be allowed to create pages

[EchoBilisim]

Issue Summary

Hello, people with author authority should not be allowed to create pages, if the author only has the option to add their content, it is sufficient if other administrators and editors have the ability to create pages.

When I add a user as an author, this added author has access to the page creation feature. This is a wrong event.

Steps to Reproduce

Ghost Version

5.50.0

Node.js Version

setup_16.x

How did you install Ghost?

ubuntu 20.04

Database type

MySQL 8

Browser & OS version

No response

Relevant log / error output

No response

Code of Conduct

• I agree to be friendly and polite to people in this repository

[markstos]

Fixing this could also be considered a resolution for #16876 which notes that some roles can add a page but not save them.

[EchoBilisim]

Fixing this could also be considered a resolution for #16876 which notes that some roles can add a page but not save them.

It is not correct for an author to add a page, the admin moderator can add it ok, but an author should not have an option to add a page, this is an incorrect process, the author just adds their content. This option is sufficient for an author.

[derek-adair]

Some people may want authors to be able to create pages. Has there been any efforts/discussion regarding some kind of permissions module?

I am quite partial to how django handles permissions. (django.contrib.auth.models.Permission). Something like this would allow developers to have fine-grained control over what users can do what. Configurable Groups would also be useful.

[github-actions]

This issue is currently awaiting triage from @daniellockyer. We're having a busy time right now, but we'll update this issue ASAP. If you have any more information to help us triage faster please leave us some comments. Thank you for understanding 🙂

[EchoBilisim]

Some people may want authors to be able to create pages. Has there been any efforts/discussion regarding some kind of permissions module?

I am quite partial to how django handles permissions. (django.contrib.auth.models.Permission). Something like this would allow developers to have fine-grained control over what users can do what. Configurable Groups would also be useful.

It can be set as an option. The sample author may have features such as what actions he can take. Then everyone can set the authorization businesses as they want, this option will be more comprehensive and more useful.

[Pratik1603]

Please assign this to me