Projects
The full list of projects, with create and edit. A project has a name, an optional description, and an active flag. Projects are never deleted — they are deactivated, so their history stays intact.Users
The global list of user accounts. Available actions:Granting access
Access is granted as a role within a specific project. A user can hold different roles in different projects, and several roles in the same project — in which case their capabilities are the sum of those roles.Most roles are narrow. A Warranty Manager cannot see inspections, and an Inspector cannot see
warranty claims. Someone whose job spans two areas needs both roles assigned, or they will
find sections missing from the sidebar rather than merely locked.See Projects and roles for what each role allows.
Field reference
project, user_project_role and users_user — every column and constraint.Superuser versus Project Admin
These are different things and it is worth keeping them apart:- Project Admin is complete authority inside one project, granted per project like any other role. A Project Admin cannot grant Project Admin to anyone else.
- Superuser is a flag on the account itself. It applies platform-wide, and it is what creates projects and user accounts.