Collection access controls are important for security because when a Collection is connected to your website — whether as a form, Collection Page, or block — the underlying API becomes accessible.
This setting determines who can view collection entries on your website or through the public API.
This setting determines who can submit new entries through your Levo site or the API.
Both settings default to a fully private state when no access level is selected.
None — Team-only dashboard access
Public — Internet access without authentication required
Members — Logged-in site users exclusively
Own entries — Users can only view or edit their own creations
Open the Dashboard.
Navigate to:
Workspace → Collections
Select the collection you want to configure.

Click the Settings button located at the top-right corner of the collection page.

You will be taken to the Schema / Settings page.
Find the Submission card.


This section contains both:
Public View Access
Public Submit Access

Locate the “Public View Access” dropdown.
Choose one of the following options:

Locate the “Public Submit Access” dropdown.
Choose one of the same access options listed above.
After configuring the required access settings:
Click Save at the bottom of the Submission card.
If your collection is already connected to pages in Studio as:
a data source, or
a form,
Levo may automatically enable the required access setting.
An informational banner may appear showing:
“Auto-enabled — used as a data source/form on X pages”
The banner may also include a list of affected pages.
If you attempt to disable access for a collection currently used on pages, a confirmation dialog will appear warning that:
“This collection is used on X pages. Disabling may break these pages.”
Access can also be controlled at the individual field level.
When editing a field in the schema editor, you will find:
Allow Public View
Allow Public Submit
These settings let you hide sensitive fields from public access while still keeping the collection itself accessible.
Collection Pages and Blocks require View Access set to “Public” or data won’t load due to blocked API calls.
The system automatically configures Submit Access as “Public” during form creation, requiring no manual adjustment. However, disabling the form should prompt resetting Submit Access to “None.”
Members-only spaces use either “Members” or “Own entries” depending on whether users should access all data or only their own.
Individual fields can have custom View Access restrictions separate from Collection-level settings, protecting sensitive information like costs or internal notes while keeping the Collection public. Restricted fields display badges in the schema editor.
Scenario | View Access | Submit Access |
|---|---|---|
Blog / directory / catalog | Public | None |
Contact / signup forms | None | Public (auto-set) |
Members dashboard | Members | Own entries |
Internal data | None | None |