The site has a powerful and fine-grained security model based on:

1. The user’s roles that define who has access to an item and how they’ll be able to interact with it. Will they be able to edit it, view it, or comment on it?
   
   2. the workflow that controls the logic of processing content through the site. At any point in time, each item of content in your site is in a particular state. This state describes its permissions and roles within site. By having items in different states, it’s possible to apply different security to each item of content.