Skip to main content

User Permissions

intermediateLast updated: 1/15/2024

Understand what each user role can access and do in the system

User Permissions

Understand what each user role can access and what actions they can perform.

Permission Overview

Permissions determine what users can:

  • View: What pages and information
  • Create: What they can create
  • Edit: What they can modify
  • Delete: What they can remove
  • Manage: What they can manage

Admin Permissions

Full System Access

Admins Can:

  • System Settings: Access all system settings
  • User Management: Create, edit, delete all users
  • Host Management: Create and manage all hosts
  • Tournament Management: Manage all tournaments
  • Match Management: Manage all matches
  • Game Management: Manage all games
  • Team Management: Manage all teams
  • Broadcast Control: Control all broadcasts

Admin-Only Features

Exclusive to Admins:

  • System configuration
  • Global user management
  • Host creation
  • System health monitoring
  • API key management
  • Database access

Staff Permissions

Tournament Management

Staff Can:

  • Tournament Management: Create and manage tournaments
  • Match Management: Create and manage matches
  • Game Management: Import and manage games
  • Team Management: View and manage teams
  • Broadcast Control: Control broadcast overlays
  • Results Entry: Enter match results

Staff Limitations

Staff Cannot:

  • Create or delete hosts
  • Change user roles
  • Access system settings
  • Manage global users
  • Modify system configuration

Host Permissions

Host-Specific Access

Hosts Can:

  • Host Settings: Manage their host settings
  • Tournament Creation: Create tournaments for their host
  • Team Management: Manage teams in their host
  • Branding: Customize host branding
  • Public Pages: Customize public pages
  • Tournament Management: Manage their tournaments

Host Limitations

Hosts Cannot:

  • Access other hosts
  • Manage system settings
  • Change user roles globally
  • Access admin features
  • Manage other hosts' tournaments

Player Permissions

Basic Participation

Players Can:

  • Profile Management: Manage own profile
  • Team Membership: Join teams
  • Tournament Registration: Register for tournaments
  • View Information: View tournaments and matches
  • Statistics: View own statistics
  • Riot Account: Link Riot account

Player Limitations

Players Cannot:

  • Create tournaments
  • Manage matches
  • Access admin features
  • Modify other users
  • Access management features

Permission Matrix

View Permissions

Who Can View What:

  • Admins: Everything
  • Staff: All tournaments and matches
  • Hosts: Their host's content
  • Players: Public content and own data

Create Permissions

Who Can Create What:

  • Admins: Everything
  • Staff: Tournaments, matches, games
  • Hosts: Tournaments for their host
  • Players: Teams (if allowed)

Edit Permissions

Who Can Edit What:

  • Admins: Everything
  • Staff: Tournaments, matches, games
  • Hosts: Their host settings and tournaments
  • Players: Own profile

Delete Permissions

Who Can Delete What:

  • Admins: Everything
  • Staff: Limited (matches, games)
  • Hosts: Their tournaments (with restrictions)
  • Players: Nothing

Host-Specific Permissions

Host Assignments

Host-Specific Access:

Users can have different permissions per host:

  • Host Admin: Full access to that host
  • Host Staff: Tournament management for that host
  • Host Player: Basic participation for that host
  • Banned: No access to that host

Permission Priority

How Permissions Work:

  1. Host-Specific Role: Takes priority for that host
  2. Global Role: Used if no host-specific role
  3. Combined: Can have different permissions per host

Permission Examples

Example Scenarios

Scenario 1: Global Staff, Host Admin

  • Can manage all tournaments (staff)
  • Can manage host settings for their host (host admin)
  • Cannot manage other hosts' settings

Scenario 2: Host Player, Global Player

  • Can participate in tournaments (player)
  • Can manage own profile (player)
  • Cannot create tournaments

Scenario 3: Global Admin

  • Can do everything
  • Full system access
  • No restrictions

Best Practices

Permission Management

  • Principle of Least Privilege: Grant minimum needed
  • Regular Review: Review permissions regularly
  • Document Access: Document who has what access
  • Audit Regularly: Audit permissions periodically

Security

  • Limit Admin Access: Keep admin accounts minimal
  • Monitor Access: Monitor user access
  • Review Changes: Review permission changes
  • Secure Accounts: Ensure account security
Tags:user-managementpermissionsaccessroles

Was this article helpful?