SEO Employee Permissions

[homesteadcastle]

Hello,

I'm getting ready to hire a marketing company that will be optimizing my prestashop website. I'm trying to get everyone's thoughts on what type of employee permissions to give the company and which one's not to give them in prestashop.

Thanks in advance!

[shokinro]

you need to create a new profile and then set permission.
you can set permission by tab at back office.

it is better to ask your consulting company what they permission want. It depends what they will do.
if you are concerning about security, ask them to sign a none disclosure agreement.

[jhnstcks]

Personally i would only give them the following permissions.

Preferences>SEO
Catalog>
Catalog>manufacturers
Catalog>suppliers

Unless you want them to do something else apart from SEO they wont need to touch anything else.

[shokinro]

I agree with jhnstcks's suggestion, usually that should be is enough.
but some time, they will do something more than that, be prepared.

[noesac]

I found a few loopholes that the permissions don't cover. For example I needed to give them access to a specific SEO module but doing do allows them access to all modules, which contain sensitive configuration data.

So my bandaid solution was to create a clone of the back office, remove the tabs, and hardcode the quick access links to specific URLs only.

It worked really well.

[shokinro]

Yes, you are right.
PrestaShop only implement high level permission setting. For most store, I think it is enough.
but for some specific situation like you, will need some extra work to be done.

[homesteadcastle]

Thank you so much to everyone for all of your replies!!! I love prestashop and community. Everyone is extremely helpful.

Joel