---
title: Configuring design permissions
---
> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).
The Design permission matrix is used to set up important permissions related to the design of page templates, related components, and the website's CSS styles.
To configure the design permissions:
1. Open the **Permissions** application.
2. In the first **Permissions for** drop-down list, choose **Module**.
3. In the second drop-down list, choose **Design**.
The changes you make on the permission matrix apply immediately.
You can assign the following permissions to members of the specified roles:
> **Note:** For security reasons, the **Edit ASCX code** and **Edit SQL code** permissions may only be assigned by users with the Global administrator [privilege level](https://docs.kentico.com/k12sp/managing-users/user-management.md).
| Permission | Description |
| --------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Design website | Allows users to edit pages on the **Design** tab of the **Pages** application. Note that even though the changes on the **Design** tab are made on a specific website, this may also affect other sites in the system if they use the same shared page template.
This permission also determines whether the given role is allowed to configure the properties of web parts through the **On-site editing** interface. |
| Edit ASCX code | Allows users to modify the ASCX code of page layouts and transformations. This permission does not affect the ability to edit the HTML versions of these objects.
This should be considered a high‑level permission because it gives users the option to add and execute inline code. |
| Edit SQL code | Allows users to create or modify query objects and edit fields containing SQL code, such as the WHERE condition properties of web parts. This should be considered a high‑level permission because it gives users the power to write and execute SQL queries against the website's database.
Users without the _Edit SQL code_ permission can still set the Where condition, Order by and Columns properties of web parts, but may only use restricted SQL syntax as described below.
**Where conditions**:
column names, values and basic operators: =, !=, >, <
AND & OR operators, parentheses
_column_ BETWEEN _value_ AND _value_
_column_ LIKE _value_
_column_ IN _(values)_
_column_ IS NULL
NOT keyword for the above expressions (NOT BETWEEN, NOT LIKE, NOT IN, IS NOT NULL)
**Order by expressions**:
one or more column names (separated by commas)
the ASC and DESC keywords
**Columns expressions**:
one or more column names (separated by commas)
SQL aliases for columns defined using the AS keyword (must be upper case) |
| Read CSS stylesheets | Allows users to access the **CSS stylesheets** application and view the code and other properties of [CSS stylesheets](https://docs.kentico.com/k12sp/developing-websites/designing-websites-using-css.md). Users without the Administrator [privilege level](https://docs.kentico.com/k12sp/managing-users/user-management.md) only have access to stylesheets assigned to the current site. |
| Modify CSS stylesheets | Allows users to create and edit CSS stylesheets (either in the **CSS stylesheets** application or in the **Pages** application on the **General** tab of individual pages). Users without the Administrator [privilege level](https://docs.kentico.com/k12sp/managing-users/user-management.md) only have access to stylesheets assigned to the current site. |
| Destroy CSS stylesheets | Allows users to delete the version history of CSS stylesheet objects. |
| Destroy transformations | Allows users to delete the version history of transformation objects. |
| Destroy page layouts | Allows users to delete the version history of shared page layouts. |
| Destroy page templates | Allows users to delete the version history of page templates. |
| Destroy web part containers | Allows users to delete the version history of web part containers. |
| Destroy web part layouts | Allows users to delete the version history of web part layouts. |