Organizations and roles
Every record belongs to one organization, and every action is checked against a role.
An organization is the tenant boundary. Every lead, draft, monitor and connection belongs to exactly one, and the server works out which organizations you may see. It never trusts an organization id sent by the browser.
Each member has one role. Admins change member roles. Admins and contributors work leads, drafts, monitors and connections. Viewers can read but not change anything.
- Roles
- org:admin, org:contributor, org:viewer
- Scope
- Resolved on the server for every request