Permissions & Roles
Meerkat registers its permissions under the meerkat group in the Statamic Control Panel. Add permissions to roles in Users → Roles, then assign those roles directly to users or through user groups. Super users bypass permission checks.
Statamic roles and user groups require Statamic Pro.
#Permission reference
| Permission | Allows |
|---|---|
view comments |
Access to the comments dashboard, editor, moderation API endpoints, and protected API parameters such as include_unpublished. |
edit comments |
Edit comment fields, change moderation status (Approve, Unpublish, Reject), edit moderation reason/notes. |
delete comments |
Delete, restore, or delete a comment with its replies. See Moderating Comments. |
check comment spam |
Run "Check Pending for Spam" and per-comment "Check for Spam" actions. |
report comment spam |
Mark comments as spam or ham and, when enabled, submit corrections to configured guards. |
submit comments |
Required for an authenticated user to submit through the front-end form or inline Control Panel reply. Without it, the Control Panel hides the Reply button. |
view comments is the parent permission. Each edit, delete, check, or report permission also requires it. Permanent-removal commands do not have a separate Statamic role permission.
#Blueprint editor access (configure fields)
Edit Comment Blueprint requires Statamic's configure fields permission. It does not require view comments.
#Settings page access (Tools → Addons → Meerkat)
Meerkat permissions do not control the settings page. Access requires one of:
- Super user access
- The global
configure addonspermission - The per-addon
edit stillat/meerkat settingspermission
Grant edit stillat/meerkat settings to let a user configure only Meerkat.
#Collection and site restrictions
The dashboard and API respect Statamic collection and site permissions. A user limited to the blog collection sees only comments on blog entries.
#Guest commenters
Statamic permissions do not apply to anonymous visitors. Set publishing.only_accept_comments_from_authenticated_users to reject guest submissions.
#Templates and API
- Templates provide permissions through the
current_userblock. - The web API enforces the same permissions.