Recent changes
Wednesday November 04 2026
-
Log retention and rotation Updated Markdown page
How long Exponential keeps its logs and audit records by default, how rotation, compression and pruning work, how to set retention per log to match a public body's records and data protection rules, and how to keep the…
-
Monitoring overview Updated Markdown page
What to watch on a public-sector Exponential site and where each signal comes from - outside checks, system information, logs and their digests, request and CSP logs, audit alerts, cronjobs and file consistency - with a…
-
Request logs: 404 and security Updated Markdown page
How Exponential separates not-found answers (404.log) and requests that look like probes or attacks (security.log) from real faults, what each line holds, how personal data is masked, and how a public body uses them for…
-
System information and health checks Updated Markdown page
What Setup > System information tells an in-house team - which server answered, the health checks with what to do, the overview cards, the support report with secrets left out - and how to run the same checks from the…
-
The log viewer Updated Markdown page
Reading Exponential's logs in the administration (Setup > Log files) and on the shell (exp:logs) - which logs exist, permalinks, following a file live, searching, finding an error by its reference, masking of personal…
-
Upgrade check as a monitor Updated Markdown page
Using the file consistency check (checkmanifest.php and Setup > Upgrade check) as a scheduled integrity monitor, so an unauthorized change to the code of a public website - a defacement, a web shell, a hand edit - is…
-
People and permissions Updated Markdown page
Index of the pages on staff access in a public-sector Exponential site - roles, policies and limitations, sections, states, least privilege, role designs for typical teams, joiners and leavers, account hygiene, two-step…
-
Admin access reviews Updated Markdown page
A periodic review of who holds which rights on a public website - administrators, role changers, account administrators, auditors and departments - using the role list badges, role pages, Check user accounts, the CSV…
-
Joiners, movers and leavers Updated Markdown page
The account life cycle of public-sector staff in Exponential - creating accounts in the right group, changing department, and retiring accounts on the last day without losing content or the audit record - with the…
-
Least-privilege principles Updated Markdown page
Seven working rules for giving public-sector staff only the access they need in Exponential, each tied to the feature that supports it, with the rights that deserve special care.
-
Object states in permissions Updated Markdown page
How object states (for example Draft, In review, Approved, or Legal cleared) let a public body tie staff and visitor access to the stage a piece of content has reached, with the limitations StateGroup and NewState and…
-
Role design: approvers Updated Markdown page
What an approver in a public body needs in Exponential to review and approve content held by an approval workflow - membership of the approvers' group, the collaboration inbox, versionread - and how to keep approval…
-
Role design: auditors Updated Markdown page
A read-only role for internal auditors, information security officers and records officers - the audit trail by channel, masked logs, role pages and version history - without any right to change content, settings or the…
-
Role design: contractors and temporary staff Updated Markdown page
How to give an agency, a contractor or temporary staff exactly the access a contract covers - one folder, one site, a fixed period - with personal accounts, a separate user group, limited assignments, two-step sign-in…
-
Role design: department editors Updated Markdown page
One reusable role for the editors of every department or agency on a shared public website, assigned once per department with a subtree limitation, with optional variants for translators and for editors whose work is…
-
Role design: the central web team Updated Markdown page
A least-privilege role for the central web team of a public body - full content work across the site, caches, cronjobs and logs, but not roles, settings or the audit's management - built only from policy functions that…
-
Roles, policies and limitations Updated Markdown page
How Exponential decides who may do what - roles made of policies, policies limited by section, subtree, class, owner, language, siteaccess or state, and roles assigned to groups - explained for public-sector web teams…
-
Sections and subtree limits Updated Markdown page
When to limit staff access by section and when by subtree of the content tree, how each behaves when content moves, and how a public body with many departments, restricted areas and shared pages combines the two.
-
Separation of duties Updated Markdown page
How to split the powers over a public website between people - authors, approvers, account administrators, system administrators and auditors - so no single account can publish unreviewed content, grant itself rights…
-
Two-step sign-in for staff Updated Markdown page
How a public body turns on two-step sign-in (authenticator app or e-mail code) for its staff with the sevenx_authentication_2fa extension, how to roll it out without locking anyone out, and what to do when someone loses…