Three roles, and access per project.
| Role | Can do |
|---|---|
| Administrator | Everything: the registers, users, settings, approving records, backups |
| Operator | Enters and edits records, marks attendance, records stock movements |
| Viewer | Reads the boards and the records, changes nothing |
Each user can also be tied to particular projects. Left blank, they see all of them; a subcontractor's engineer or a client's inspector can be given one site and nothing else.
Records lock themselves
A record can be draft, submitted or approved. Only an administrator approves, and an approved record can no longer be edited by anybody else. Beyond that, records lock automatically after the day closes — the hour is yours to set under Settings.
Every change is kept with the name of whoever made it and the time, under Administration → Audit.
Passwords
Anybody can change their own: click your name in the top right corner. An administrator can reset somebody else's from Administration → Users by typing a new one.
If nobody can get in — the only administrator has lost their password — whoever runs the service can issue a new one from their control panel, and it is shown to them once to pass on. Nobody can read your existing password; it is not stored in a form that can be read back, which is the point.
Five wrong attempts lock the sign-in for fifteen minutes. The lock is on the browser session, so another browser or a private window can try again straight away.