Core Docs - Core Concepts - Intro to Security

Rock Version: v21.0
Last Modified: 2026-10-02 11:36 AM

The data in Rock is some of the most sensitive your organization holds (giving records, family details, background checks), so deciding who can see and do what is one of the most important jobs you have. Rock's security model is built to make that manageable, not overwhelming.

A few ideas do most of the work:

The next articles walk through setting these up. Start with Security Roles and Secure a Page or Block.

Keep Rock Up to Date

Permissions protect your data from the inside. Updates protect it from the outside. When a more secure version of Rock is available, people in the RSR - Rock Administration role see a notice on the internal homepage until you update. See Update Rock to learn how to install updates.

Report a Security Issue

If you find what looks like a security flaw in Rock, report it at security.rockrms.com instead of opening a GitHub issue. Reports there stay private, so our team can fix the problem before the details are public.