---
title: Configuring design permissions
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

The Design permission matrix is used to set up important permissions related to the design of page templates and their components.

To configure the design permissions:

1. Open the **Permissions** application.
2. In the first **Permissions for** drop-down list, choose **Module**.
3. In the second drop-down list, choose **Design**.

The changes you make on the permission matrix apply immediately.

![The permission matrix for designing websites](https://docs.kentico.com/docsassets/k10/configuring-design-permissions/Design_permissions.png "The permission matrix for designing websites")

You can assign the following permissions to members of the specified roles:

| Design website              | Allows users to edit pages on the **Design** tab of the **Pages** application. Note that even though the changes on the **Design** tab are made on a specific website, this may also affect other sites in the system if they use the same shared page template.<br>This permission also determines whether the given role is allowed to configure the properties of web parts through the **On-site editing** interface.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Edit ASCX code              | Allows users to modify the ASCX code of page layouts and transformations. This permission does not affect the ability to edit the HTML versions of these objects.<br>This should be considered a high‑level permission because it gives users the option to add and execute inline code.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  |
| Edit SQL code               | Allows users to create or modify query objects and edit fields containing SQL code, such as the WHERE condition properties of web parts. This should be considered a high‑level permission because it gives users the power to write and execute SQL queries against the website's database.<br>Users without the _Edit SQL code_ permission can still set the Where condition, Order by and Columns properties of web parts, but may only use restricted SQL syntax as described below.<br>**Where conditions**:<br>column names, values and basic operators: =, !=, >, <<br>AND & OR operators, parentheses<br>_column_ BETWEEN _value_ AND _value_<br>_column_ LIKE _value_<br>_column_ IN _(values)_<br>_column_ IS NULL<br>NOT keyword for the above expressions (NOT BETWEEN, NOT LIKE, NOT IN, IS NOT NULL)<br>**Order by expressions**:<br>one or more column names (separated by commas)<br>the ASC and DESC keywords<br>**Columns expressions**:<br>one or more column names (separated by commas)<br>SQL aliases for columns defined using the AS keyword (must be upper case) |
| Destroy transformations     | Allows users to delete the version history of transformation objects.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Destroy CSS stylesheets     | Allows users to delete the version history of CSS stylesheet objects.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                     |
| Destroy page layouts        | Allows users to delete the version history of shared page layouts.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| Destroy page templates      | Allows users to delete the version history of page templates.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| Destroy web part containers | Allows users to delete the version history of web part containers.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        |
| Destroy web part layouts    | Allows users to delete the version history of web part layouts.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |

For security reasons, the **Edit ASCX code** and **Edit SQL code** permissions may only be assigned by users with the Global administrator [privilege level](https://docs.kentico.com/k10/managing-users/user-management.md).