Identity & access

Four roles, one source of truth

administrator, editor, viewer and pending. The permission table is transcribed once in code; the API checks, the database policies and the Studio’s grants payload are all projections of it.

shipped