Roles
Permissions Explained
How permission keys filter navigation and actions.
Permissions are dotted strings such as academic.timetable.read or admin.finance.manage.
How they apply
- Each sidebar item can require a permission (or any of several).
managetypically implies create/read/update/delete for that domain.- Effective permissions = identity-role defaults plus all assigned staff-role permissions for the school.
Domains
- People — students, teachers, parents, attendance
- Academic — LMS, exams, timetable, grades, assignments, subjects, discipline
- Campus — transport, library, hostel, health, security
- Admin — finance, HR, inventory, communications, approvals
- Add-ons — admissions, ID cards, biometric, alumni, canteen, substitutes
- System — settings, roles, website, AI