Permissions

File Manager Pro uses the panel's normal permission system, with a few extra permissions for the features it adds. Every action needs a core file permission and, for the Recycle Bin and history, an extension permission as well. Both must be granted.

Controls you cannot use are disabled, with a tooltip that names the missing permission. The server checks the same rules, so a disabled button cannot be used by calling the API directly.

The permission table

Feature	Core permission	Extension permission
Browse, grid and list views	file.read	—
Thumbnails, Quick Look, download	file.read-content	—
Create, upload, paste	file.create	—
Rename, move, change permissions, edit	file.update	—
Delete to the Recycle Bin	file.delete	—
See the Recycle Bin	file.read	ext.file-manager-pro.bin-read
Restore from the bin	file.create	ext.file-manager-pro.bin-restore
Delete permanently, empty the bin	file.delete	ext.file-manager-pro.bin-purge
See file history	file.read-content	ext.file-manager-pro.versions-read
Restore a version	file.update	ext.file-manager-pro.versions-restore
Pin or label versions, save a version by hand, change tracking	file.update	ext.file-manager-pro.versions-manage
Compress, extract, download as zip	file.archive	—

Suggesting a set of permissions

• Players — file.read and file.read-content, so they can look at their server files and preview them, but change nothing.
• Trusted staff — the above plus file.create, file.update and file.delete, with bin-read and bin-restore, so they can undo their own mistakes.
• Server owners — the above plus file.archive, bin-purge, and the three history permissions, so they can recover from anything and manage their own history.

Change tracking and permanent deletes are worth restricting, because they can remove the safety net that the bin and history provide.

Where to grant them

• Panel-wide: Admin → Users → Edit → Permissions.
• Per server: the server's Subusers page.
• Hosts and resellers: the same permissions apply. If you sell access to your panel, grant the extension permissions deliberately rather than by default.

If an action is greyed out and the tooltip names an extension permission, your account has the core permission but not the extension one. Ask your host to grant it.