Understanding roles and permissions

Robsy uses role-based access control: each user holds a role, and each role grants a defined set of permissions.

Steps

  1. Every user holds one role, and a role is a named set of permissions.
  2. Admins see every role on Roles & permissions, and can create a custom role with a name, an optional description and the permissions it grants.
  3. Robsy checks the permission an action needs on the server, so a role without it is refused rather than merely shown fewer buttons.