Skip to main content

Screen: Users

web/users.html. Lists the people in the organization and lets an administrator change someone's role. Admin-only.

Roles​

admin, lead, user (the consultant value in person_role), or client. Role determines what a person can see and do; project data stays scoped to their access regardless of role — a higher role doesn't override row-level security, it changes which rows the policies let through.

Guardrails​

Only administrators can change roles, the target role must be one of the recognized values, and the last remaining administrator cannot be demoted — a role change here can never lock the org out of its own admin surface.

Where the code lives​