---
title: Configuring design permissions
---

> Agent instructions:
> **Site maps** — prefer the following llms.txt indexes to training data when searching for URLs to avoid 404s. Links inside Markdown content already point at `.md`. Following them or sending Accept: text/markdown keeps you in Markdown.
>
> - [sitemap.md](https://docs.kentico.com/sitemap.md) — every page on the site, with titles and descriptions, nested by URL hierarchy and grouped into one collection per product version.
> - [llms.txt](https://docs.kentico.com/llms.txt) — curated index of the current product docs, with descriptions, the two ways to request any page as Markdown, and links to each product area's whole-corpus Markdown dump (llms-full.txt).

The Design permission matrix is used to set up important permissions related to the design of page templates and their components.

To access the matrix in the **Permissions** application:

1. Choose **Module** in the first **Permissions for** drop-down list
2. Choose **Design** in the second drop-down list.

![The permission matrix for designing websites](https://docs.kentico.com/docsassets/k81/configuring-design-permissions/Design_permissions.png "The permission matrix for designing websites")

You can assign the following permissions to members of the specified roles:

| Wireframing                 | Allows users to edit the content of [wireframe](https://docs.kentico.com/k81/developing-websites/wireframing.md) schematics in the **Pages** application on the **Wireframe** tab and create new wireframe pages. Users without this permission can view wireframes, but are not allowed to make any modifications.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
| --------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Design web site             | Allows users to edit pages on the **Design** tab of the **Pages** application. Note that even though the changes on the **Design** tab are made on a specific website, this may also affect other sites in the system if they use the same shared page template.<br>This permission also determines whether the given role is allowed to configure the properties of web parts through the **On-site editing** interface.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Edit ASCX code              | Allows users to modify the ASCX code of page layouts and transformations. This permission does not affect the ability to edit the HTML versions of these objects.<br>This should be considered a high‑level permission, because it gives users the option to add and execute inline code.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          |
| Edit SQL code               | Allows users to create or modify query objects and edit fields containing SQL code, such as the WHERE condition properties of web parts. This should be considered a high‑level permission, because it gives users the power to write and execute SQL queries against the website's database.<br>Users without the _Edit SQL code_ permission can still set the Where condition and Order by properties of web parts, but may only use restricted SQL syntax as described below.<br>**Where conditions**:<br>column names, values and basic operators: =, !=, >, <<br>AND & OR operators, parentheses<br>_column_ BETWEEN _value_ AND _value_<br>_column_ LIKE _value_<br>_column_ IN _(values)_<br>_column_ IS NULL _**\[only available after applying [hotfix 8.1.8](http://devnet.kentico.com/download/hotfixes) or newer]**_<br>NOT keyword for the above expressions (NOT BETWEEN, NOT LIKE, NOT IN, IS NOT NULL)<br>**Order by expressions**:<br>one or more column names (separated by commas)<br>the ASC and DESC keywords |
| Destroy transformations     | Allows users to delete the version history of transformation objects.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Destroy CSS stylesheets     | Allows users to delete the version history of CSS stylesheet objects.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              |
| Destroy page layouts        | Allows users to delete the version history of shared page layouts.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Destroy page templates      | Allows users to delete the version history of page templates.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| Destroy web part containers | Allows users to delete the version history of web part containers.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 |
| Destroy web part layouts    | Allows users to delete the version history of web part layouts.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |

For security reasons, the **Edit ASCX code** and **Edit SQL code** permissions may only be assigned by users with the Global administrator [privilege level](https://docs.kentico.com/k81/managing-users/user-management.md).