Roles & permissions

Access comes in levels — member, staff, manager, operator — and is granted per location, so someone can be a manager at one site and simply a member at another.

Working somewhere is treated separately from having access to it, which keeps rotas honest. What someone is currently viewing as never changes what they are allowed to do; permission is always checked against what has actually been granted.