Hi,
I'm looking at Akeeba Tools permissions and was wondering if there is a way for administrators to access the URL redirection components only.
Please let me know.
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Latest post by iamrobert1978 on Friday, 05 September 2025 00:47 CDT
Hi,
I'm looking at Akeeba Tools permissions and was wondering if there is a way for administrators to access the URL redirection components only.
Please let me know.
There is a way to achieve something similar to what you want.
Because Joomla permissions apply to the component, not individual views, you can only use permissions to control access to the component. You need to give your administrators the Access Administration Interface and Utility privileges.
Normally, this would allow them to have too much access. However, Admin Tools offers a secondary access control feature: Main Password. You can select which views will be protected behind the Main Password. Select everything except URL Redirection. Do NOT give the password to your Administrators.
Your Administrators will log into your site's backend but the only thing they will be able to access will be the URL Redirection page. Everything else will ask them for the Main Password.
So, you get kinda what you want, with a few more steps.
You may wonder, why not add individual permissions for every feature? That's 34 permissions. Per user group. Joomla creates one POST form field for each permission for each user group. If your site has a large number of user group (about 25 would do it, as there are other permissions and we have to also remember to count all of the options and about a dozen core Joomla parameters being sent in the POST) you'd end up with an Options form that has more than 1000 POST parameters. This will trigger the security features of most hosts, blocking you from changing the component's options. This is why there are only three very broad areas in the Permissions and we have implemented the Main Password feature as an additional access control.
Ideally, Joomla should be serialising the entire form into a single JSON document and then just POST that document. This is something we are already doing in Akeeba Backup because of a similar issue we came across with some servers. This would circumvent this limitation and allow third party developers with far more complex products than Joomla's fairly straightforward core components to implement far more fine-grained controls. To be clear, that's the ideal situation. I do not see anything which even remotely points to the Joomla maintainers even planning to do something like this. You can always submit a GitHub discussion or issue and point to this public ticket, but I wouldn't count on it going very far – at least not very fast. It would require some fairly deep changes to how Joomla's com_config works with some associated changes in the core MVC controller and model code to handle this kind of use case. Not impossible, but certainly not something that could be conceivably delivered outside a new major release.
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Thanks, Nicholas,
Your solution worked really well for our needs, and I appreciate the clear explanation.
If anyone else wants to do it:
Joomla backend → Components → Admin Tools → Options (top right).
Open Permissions tab.
Select Administrator group.
Change:
Access Administration Interface → Allowed
Utility → Allowed
Save & Close.
Go to Components → Admin Tools.
Open Main Password (from the Admin Tools Control Panel).
Set a Main Password (do not share with Administrators).
In the Protected features/views list, select all items except “URL Redirection.”
Save.
Working hours: We are open Monday to Friday, 9am to 7pm Cyprus timezone (EET / EEST). Support is provided by the same developers writing the software, all of which live in Europe. You can still file tickets outside of our working hours, but we cannot respond to them until we're back at the office.
Support policy: We would like to kindly inform you that when using our support you have already agreed to the Support Policy which is part of our Terms of Service. Thank you for your understanding and for helping us help you!