User Permissions
intermediateLast updated: 1/15/2024
Understand what each user role can access and do in the system
User Permissions
Understand what each user role can access and what actions they can perform.
Permission Overview
Permissions determine what users can:
- View: What pages and information
- Create: What they can create
- Edit: What they can modify
- Delete: What they can remove
- Manage: What they can manage
Admin Permissions
Full System Access
Admins Can:
- System Settings: Access all system settings
- User Management: Create, edit, delete all users
- Host Management: Create and manage all hosts
- Tournament Management: Manage all tournaments
- Match Management: Manage all matches
- Game Management: Manage all games
- Team Management: Manage all teams
- Broadcast Control: Control all broadcasts
Admin-Only Features
Exclusive to Admins:
- System configuration
- Global user management
- Host creation
- System health monitoring
- API key management
- Database access
Staff Permissions
Tournament Management
Staff Can:
- Tournament Management: Create and manage tournaments
- Match Management: Create and manage matches
- Game Management: Import and manage games
- Team Management: View and manage teams
- Broadcast Control: Control broadcast overlays
- Results Entry: Enter match results
Staff Limitations
Staff Cannot:
- Create or delete hosts
- Change user roles
- Access system settings
- Manage global users
- Modify system configuration
Host Permissions
Host-Specific Access
Hosts Can:
- Host Settings: Manage their host settings
- Tournament Creation: Create tournaments for their host
- Team Management: Manage teams in their host
- Branding: Customize host branding
- Public Pages: Customize public pages
- Tournament Management: Manage their tournaments
Host Limitations
Hosts Cannot:
- Access other hosts
- Manage system settings
- Change user roles globally
- Access admin features
- Manage other hosts' tournaments
Player Permissions
Basic Participation
Players Can:
- Profile Management: Manage own profile
- Team Membership: Join teams
- Tournament Registration: Register for tournaments
- View Information: View tournaments and matches
- Statistics: View own statistics
- Riot Account: Link Riot account
Player Limitations
Players Cannot:
- Create tournaments
- Manage matches
- Access admin features
- Modify other users
- Access management features
Permission Matrix
View Permissions
Who Can View What:
- Admins: Everything
- Staff: All tournaments and matches
- Hosts: Their host's content
- Players: Public content and own data
Create Permissions
Who Can Create What:
- Admins: Everything
- Staff: Tournaments, matches, games
- Hosts: Tournaments for their host
- Players: Teams (if allowed)
Edit Permissions
Who Can Edit What:
- Admins: Everything
- Staff: Tournaments, matches, games
- Hosts: Their host settings and tournaments
- Players: Own profile
Delete Permissions
Who Can Delete What:
- Admins: Everything
- Staff: Limited (matches, games)
- Hosts: Their tournaments (with restrictions)
- Players: Nothing
Host-Specific Permissions
Host Assignments
Host-Specific Access:
Users can have different permissions per host:
- Host Admin: Full access to that host
- Host Staff: Tournament management for that host
- Host Player: Basic participation for that host
- Banned: No access to that host
Permission Priority
How Permissions Work:
- Host-Specific Role: Takes priority for that host
- Global Role: Used if no host-specific role
- Combined: Can have different permissions per host
Permission Examples
Example Scenarios
Scenario 1: Global Staff, Host Admin
- Can manage all tournaments (staff)
- Can manage host settings for their host (host admin)
- Cannot manage other hosts' settings
Scenario 2: Host Player, Global Player
- Can participate in tournaments (player)
- Can manage own profile (player)
- Cannot create tournaments
Scenario 3: Global Admin
- Can do everything
- Full system access
- No restrictions
Best Practices
Permission Management
- Principle of Least Privilege: Grant minimum needed
- Regular Review: Review permissions regularly
- Document Access: Document who has what access
- Audit Regularly: Audit permissions periodically
Security
- Limit Admin Access: Keep admin accounts minimal
- Monitor Access: Monitor user access
- Review Changes: Review permission changes
- Secure Accounts: Ensure account security
Related Articles
Tags:user-managementpermissionsaccessroles