Generate a sitemap with permissions for a given role #5178

New Issue

OVERLORD · 2026-02-05T09:46:25+03:00

OVERLORD commented

2026-02-05 09:46:25 +03:00

Originally created by @ingelres on GitHub (Feb 13, 2025).

Describe the feature you'd like

Currently, and unless I missed something, it is very difficult to make sure permissions have been properly set on each book and page. This is especially true when dealing with a lot of books and a lot roles, each of them having different permissions on different books and pages.

It would be very helpful as an admin to be able to generate a sitemap for a given role, showing the list of books and pages with the associated permissions.

Example

Book1: Read
Book2:
- Page A: Read
- Page B: Read
- Page D: Write

The role has read access to the whole book1, so there's no page details. It has read access on Book2 but specifically a write access on page D and no access on page C so the page detail is provided. The role has no access on Book3 so Book3 is not listed.

Describe the benefits this would bring to existing BookStack users

It would allow admins to make sure permissions are properly set. It would especially be useful to make sure a given role has no read access where it should not : Unauthorized writes can be detected in the audit log, but not unauthorized reads.

Can the goal of this request already be achieved via other means?

Yes by going through each book and each page one by one. This takes a lot of time while the sitemap feature would provide nearly instant results.

Have you searched for an existing open/closed issue?

I have searched for existing issues and none cover my fundamental request

How long have you been using BookStack?

3 months to 1 year

Additional context

No response

Originally created by @ingelres on GitHub (Feb 13, 2025). ### Describe the feature you'd like Currently, and unless I missed something, it is very difficult to make sure permissions have been properly set on each book and page. This is especially true when dealing with a lot of books and a lot roles, each of them having different permissions on different books and pages. It would be very helpful as an admin to be able to generate a sitemap for a given role, showing the list of books and pages with the associated permissions. **Example** - Book1: Read - Book2: - Page A: Read - Page B: Read - Page D: Write The role has read access to the whole book1, so there's no page details. It has read access on Book2 but specifically a write access on page D and no access on page C so the page detail is provided. The role has no access on Book3 so Book3 is not listed. ### Describe the benefits this would bring to existing BookStack users It would allow admins to make sure permissions are properly set. It would especially be useful to make sure a given role has no read access where it should not : Unauthorized writes can be detected in the audit log, but not unauthorized reads. ### Can the goal of this request already be achieved via other means? Yes by going through each book and each page one by one. This takes a lot of time while the sitemap feature would provide nearly instant results. ### Have you searched for an existing open/closed issue? - [x] I have searched for existing issues and none cover my fundamental request ### How long have you been using BookStack? 3 months to 1 year ### Additional context _No response_

OVERLORD added the 🔨 Feature Request :cat2:🐈 Possible duplicate labels 2026-02-05 09:46:25 +03:00

OVERLORD closed this issue

2026-02-05 09:46:27 +03:00

OVERLORD commented

2026-02-05 09:46:30 +03:00

@ssddanbrown commented on GitHub (Feb 13, 2025):

Thanks for the request @ingelres, but I feel the fundamental issue is already covered by existing request #1736. #3739 also strongly related. Therefore I'm going to close off this issue.

@ssddanbrown commented on GitHub (Feb 13, 2025): Thanks for the request @ingelres, but I feel the fundamental issue is already covered by existing request #1736. #3739 also strongly related. Therefore I'm going to close off this issue.

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/BookStack#5178