Roles & Permissions
| Role | Description | |------|-------------| | **Super Admin** | Full access to everything including user management and settings | | **Admin** | Full access to product configuration, integrations, and user management | | **Manager** | Can manage products, components, and custom
Roles & Permissions
Default Roles
| Role | Description |
|---|---|
| Super Admin | Full access to everything including user management and settings |
| Admin | Full access to product configuration, integrations, and user management |
| Manager | Can manage products, components, and customisations |
| Editor | Can edit product configurations but not create or delete |
| Viewer | Read-only access to the dashboard and products |
Permission Categories
Permissions are grouped by resource:
| Resource | Permissions |
|---|---|
| Products | View, Create, Edit, Delete |
| Components | View, Create, Edit, Delete |
| Customisations | View, Create, Edit, Delete |
| Users | View, Create, Edit, Delete |
| Settings | View, Edit |
| Integrations | View, Configure |
| Sync Data | View, Trigger sync |
How Permissions Are Enforced
- Backend: Every API request checks the user's role and permissions
- Frontend: UI elements are shown/hidden based on permissions (but this is cosmetic — the backend is the authority)
Custom Roles
Content needed: Can clients create custom roles? If so, how.