# Access Control on a per-document or per-collection basis **URL:** \ **Category:** Community Water Cooler\ **Created:** [July 29, 2020, 1:58pm UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381 "2020-07-29T13:58:08Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![shawn.rice](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@shawn.rice](https://community.prismic.io/u/shawn.rice)\ **Post date:** [July 29, 2020, 1:58pm UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381/1 "2020-07-29T13:58:08Z")
Hi. We are looking ahead to some new features and I wanted to see if there was an established path for access control. My client offers multiple software products. We want to restrict access to specific Prismic documents (os r better yet, collections) depending on if the user holds a valid license. Has anyone found success with this sort of functionality? Are there any features native to Prismic that enables this without client-side checks? ---
**Author:** ![Levi](https://dub1.discourse-cdn.com/flex013/user_avatar/community.prismic.io/levi/32/24_2.png) [@Levi](https://community.prismic.io/u/Levi)\ **Post date:** [July 30, 2020, 9:22am UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381/3 "2020-07-30T09:22:39Z")
Hi @shawn.rice, thanks for reaching out about this. Prismic doesn’t have any sort of native features for this sort of thing. This is something that will need to be handled in your website application. What you could do in Prismic is use a Select field or a Select field in a Group for your content authors to choose the group of users that have access to a given document. Then in your website app you could look to see which users have been selected and do the validation check from there. I’m also interested, though, to see what others out there have done to achieve this 🙂 ---
**Author:** ![shawn.rice](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@shawn.rice](https://community.prismic.io/u/shawn.rice)\ **Post date:** [July 30, 2020, 4:41pm UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381/4 "2020-07-30T16:41:25Z")
Talked to the team and our access control needs are pretty robust and we are fairly certain that we will need to pass requests through a node server to ensure the user has the appropriate permissions before making any queries. But our content team loves the Prismic Toolbar. I can tell that it’s an iframe but am otherwise pretty lost as to how it’s receiving data. Is there any visibility into that? Any known methods to feed data into it? ---
**Author:** ![Levi](https://dub1.discourse-cdn.com/flex013/user_avatar/community.prismic.io/levi/32/24_2.png) [@Levi](https://community.prismic.io/u/Levi)\ **Post date:** [July 31, 2020, 9:41am UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381/5 "2020-07-31T09:41:00Z")
@shawn.rice I’m sorry, I think I’m a bit lost now. How does the Prismic Toolbar fit into this? What is it you would like to do / pass into the toolbar? ---
**Author:** ![shawn.rice](https://avatars.discourse-cdn.com/v4/letter/s/e47774/32.png) [@shawn.rice](https://community.prismic.io/u/shawn.rice)\ **Post date:** [August 4, 2020, 1:08pm UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381/6 "2020-08-04T13:08:52Z")
Apologies. I have now realized that the graphQL layer does not interfere completely with the toolbar’s ability to function. I have a different question on that but will address it in a different topic for visibility’s sake. Cheers! ---
**Author:** ![system](https://dub1.discourse-cdn.com/flex013/user_avatar/community.prismic.io/system/32/1746_2.png) [@system](https://community.prismic.io/u/system)\ **Post date:** [September 23, 2020, 2:59pm UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381/7 "2020-09-23T14:59:53Z")
Threads close after a period of inactivity. [Flag this thread](https://community.prismic.io/t/re-open-a-thread/2175) to re-open it and continue the conversation. ---
**Author:** ![system](https://dub1.discourse-cdn.com/flex013/user_avatar/community.prismic.io/system/32/1746_2.png) [@system](https://community.prismic.io/u/system)\ **Post date:** [December 9, 2021, 10:19am UTC](https://community.prismic.io/t/access-control-on-a-per-document-or-per-collection-basis/1381/8 "2021-12-09T10:19:02Z")