Administration
Roles and permissions
How access is granted, and the rule that roles are never stored on a profile.
Admins
Granting access
- 1Open Members and select the person.
- 2Add or remove roles — roles stack, so an instructor who also rents aircraft holds both instructor and member.
- 3Changes take effect on their next page load; navigation and data access adjust automatically.
How it is enforced
Roles live in a dedicated table and are checked server-side on every read and write. Hiding a menu item is a convenience, not the security boundary — the database refuses data the signed-in user is not entitled to.
