docs/tools/change-permissions.md
Fine-tune what recipients can do with your PDF. Unlike basic encryption that just locks the file behind a password, this tool lets you selectively allow or deny printing, copying, editing, annotating, form filling, document assembly, and page extraction -- all enforced through 256-bit AES encryption.
If you leave both new password fields empty, the tool decrypts the PDF entirely, removing all encryption and restrictions.
| Permission | What It Controls |
|---|---|
| Allow Printing | Whether the document can be printed |
| Allow Copying | Whether text and images can be selected and copied |
| Allow Modifying | Whether the document content can be edited |
| Allow Annotating | Whether comments, highlights, and stamps can be added |
| Allow Filling Forms | Whether interactive form fields can be completed |
| Allow Document Assembly | Whether pages can be inserted, deleted, or rotated |
| Allow Page Extraction | Whether individual pages can be extracted |
All permissions require an owner password to be enforced. Without an owner password, permission flags are ignored by most PDF readers.
PDF permissions are part of the encryption specification. They are stored as bit flags in the encryption dictionary and enforced by compliant PDF readers. The key distinction:
If you set only an owner password (no user password), anyone can open the file but they are restricted to the allowed operations. If you set both, the file requires a password to open and is restricted after authentication.