Thanks, I had thought that but I was trying to allow them to add a file to assets and edit a button that links to it. But protect the rest of the website.