Seclude

Per-element user restrictions for Craft CMS 5.

Craft's content permissions stop at the container. You can say Jane may edit the News section. You cannot say Jane may edit these three News entries — and the same wall stands in front of category groups, asset volumes and user groups.

Seclude carries the permission the rest of the way down, to the individual element.

Craft            Jane → News  ────────────────────────────►  all 2,400 entries
Seclude          Jane → News → entries she authored,
                               entries in her region,
                               and three picked by hand   ►  31 entries

The one thing to know

Seclude can only take away.

Every authorization decision it makes is refuse or no opinion. Never permit. A user still needs Craft's own permission for the section first; Seclude narrows what that permission reaches.

That is what makes it safe to put on a live site. Switching it on cannot widen anybody's access, switching it off cannot leave anything locked, and a policy you have not written yet governs nothing at all.

Craft 5.3+, PHP 8.2+. No runtime dependencies, no build step.

Nothing changes until you write a policy.