Our Visual Editing feature is live! 🎉 Learn more
Directus Logo
  • Use Cases and Features
    • Headless CMS
      Manage and deliver content with ease
    • Backend-as-a-Service
      Build and ship applications faster
    • Headless Commerce
      A single source of truth for products
    • 100+ More Use Cases
      Build anything (or everything)
    • Instant APIs
      Connect a database, get REST + GraphQL APIs
    • Granular Policy-Based Auth
      Provide secure, autonomous data access
    • Visual Automation Builder
      Automate content and data workflows with ease
    • 50+ More Features
      Get everything you need out-of-the-box
    Project Showcase
    Built With Directus

    Built With Directus

    See what everyone's been building with Directus

  • Learn More
    • Blog
      Read our latest articles and guides
    • Case Studies
      Case studies and success stories
    • Community
      Join our 13k member Discord community.
    • Agency Directory
      Browse our list of agency partners
    • About Us
      Learn more about Directus and the team
    • Wall of Love
      See what others are saying about us
    • Contact
      Have a general inquiry or question for us?
    • Support
      Reach out to Directus support
    Watch Directus TV
    Directus TV
    Video

    Directus TV

    Go down the rabbit hole with hours of original video content from our team.

  • Developers
  • Enterprise
  • Pricing
Chat With UsGet Started Free
GitHub logo30,483
Back
news
Monday, June 17, 2024

Introducing Directus 11: Release Candidate with Policies

Directus 11 is here with policies - our key new feature making access control more powerful and flexible in your projects.
Introducing Directus 11: Release Candidate with Policies

We are thrilled to announce the Release Candidate of Directus 11, which marks a significant overhaul in how we manage access control. Over the past few months, our team has been dedicated to researching and developing our key new feature — Policies.

Introducing Policies

Policies revolutionize the way you compose access control for your roles and users. Unlike in Directus 10, where permissions were directly attached to roles, making it necessary to create multiple similar roles to achieve the desired granularity, Policies provide a level of abstraction for more flexible projects.

Key Benefits and Features

  1. Enhanced Granularity: In Directus 10, permissions were singularly tied to roles, limiting users to one set of permissions. With Policies, you can now attach multiple policies to any role or user, allowing for finer control and easier management.
  2. Reusable Permission Sets: Policies act as an abstraction layer, enabling permissions to be reused across roles and users. This means you can create a set of permissions once and apply them to multiple roles or users as needed.
  3. Flexible Assignments: Policies can be added directly to a role, a user, or both. This flexibility ensures that you can manage permissions more effectively and cater to various project needs.

Practical Examples

  • Website Management: Create a "Page Edit" Policy with permissions required to edit website pages. Assign this Policy to both your Marketing and Engineering roles.
  • Sales Reporting: Develop a "View Quarterly Results" Policy for your Analysts, Account Executives, and Demand Team to access quarterly results. This approach allows different roles to share related permissions without duplication.
  • Multi-Tenant Systems: Configure individual roles per tenant while relying on shared Policies for permissions. This centralized management keeps tenant permissions separate yet easily controlled.

What About Roles?

Roles still exist, but now serve a different purpose. Instead of being permissions-based, Roles can either be used as groupings of policies that can be applied to users, or as true organizational units to describe a person’s position within your business.

As with previous releases, we are providing an automatic migration from Directus 10 to Directus 11 to help you seamlessly transition to using Policies. Permissions attached to existing roles will be converted into a single policy, that will be assigned to the role. You can then explore the new policies feature when you’re ready.

We are confident that this new flexibility will simplify the management of complex projects and make your life easier.

Directus 11 RC will be available later this week. Please share your thoughts in our #directus-11-rc channel on Discord.

Posted By

Rijk van Zanten

Rijk van Zanten

CTO, Co-Founder

Share

LinkedIn LogoTwitter LogoReddit LogoDev.to Logo

Sign up for updates 🐇

Get insights, releases, and exciting news delivered directly to your inbox once a month. No spam - we promise. 🙂

  • Directus LogoDirectus Logo

    A composable backend to build your Headless CMS, BaaS, and more. 

  • Solutions
    • Headless CMS
    • Backend-as-a-Service
    • Product Information
    • 100+ Things to Build
  • Resources
    • Documentation
    • Guides
    • Community
    • Release Notes
  • Support
    • Issue Tracker
    • Feature Requests
    • Community Chat
    • Cloud Dashboard
  • Organization
    • About
    • Careers
    • Brand Assets
    • Contact
©2025 Monospace Inc
  • Cloud Policies
  • License
  • Terms
  • Privacy