# Defining user roles and authorization levels

**URL:** https://community.thunkable.com/t/defining-user-roles-and-authorization-levels/656026
**Category:** Questions about Thunkable X
**Tags:** firebase, design, username
**Created:** [July 4, 2020, 5:20pm UTC](https://community.thunkable.com/t/defining-user-roles-and-authorization-levels/656026 "2020-07-04T17:20:48Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![maimon.amitzk6w](https://avatars.discourse-cdn.com/v4/letter/m/ecc23a/32.png) [@maimon.amitzk6w](https://community.thunkable.com/u/maimon.amitzk6w)
#### Post date: [July 4, 2020, 5:20pm UTC](https://community.thunkable.com/t/defining-user-roles-and-authorization-levels/656026/1 "2020-07-04T17:20:48Z")

</div>

Hi, My app includes a log-in using firebase, it also has Airtable as a backend DB, i’m now trying to decide how to best implement authorization levels and user based content. For example:

- I would like users to be able to edit content they contributed to the site but only content they contributed
- users should be able to add/edit contact details for relatives which will get notifications based on actions.

Can someone point me in the direction of best practices for above?

Thank you!

---

<div class="post-metadata">

### Author: ![domhnallohanlon](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/domhnallohanlon/32/29554_2.png) [@domhnallohanlon](https://community.thunkable.com/u/domhnallohanlon)
#### Post date: [July 6, 2020, 12:17pm UTC](https://community.thunkable.com/t/defining-user-roles-and-authorization-levels/656026/2 "2020-07-06T12:17:16Z")

</div>

Hey @maimon.amitzk6w, thanks for the interesting question.

> [@maimon.amitzk6w](#):
>
> I would like users to be able to edit content they contributed to the site but only content they contributed

I don’t think we have an example for anything quite like this so you’d have to try your own implementation.

Perhaps you can add an extra `isAuthor` or even an `Author` field to your data and use that to decide whether or not that particular user can edit it.

---

<div class="post-metadata">

### Author: ![ioannis](https://sea1.discourse-cdn.com/flex015/user_avatar/community.thunkable.com/ioannis/32/146956_2.png) [@ioannis](https://community.thunkable.com/u/ioannis)
#### Post date: [November 8, 2024, 11:25am UTC](https://community.thunkable.com/t/defining-user-roles-and-authorization-levels/656026/3 "2024-11-08T11:25:04Z")

</div>