Permissions

Access is controlled by a role-based access control system.

note

Status: Planned 2020

Roles

• owner: Full control of the Org
• admin: Full control of the Org except deleting it (read only billing)
• reporter: Read-only access to an Org
• onsite: Can check-in, register, and view attendees/orders

Org

Action	onsite	reporter	admin	owner
org:read	x	x	x	x
org:update			x	x
users:update			x	x
org:delete				x
billing:update				x

Event

Action	onsite	reporter	admin	owner
event:read	x	x	x	x
event:create			x	x
event:update			x	x
event:delete			x	x

Messages

Action	onsite	reporter	admin	owner
message:read		x	x	x
message:create			x	x
message:update			x	x
message:delete			x	x

Registration

Action	onsite	reporter	admin	owner
attendee:read	x	x	x	x
order:read	x	x	x	x
attendee:update	x		x	x
order:update	x		x	x
order:create	x		x	x