1.0.0-rc.1 · Release Candidate1 min read
AutoCore Roles, Permissions, and Ownership
Source-verified global roles, fine-grained permissions, dealer roles, and resource ownership boundaries.
The global hierarchy is user, moderator, admin, and super_admin. Dealer membership has its own owner, manager, and staff hierarchy. Permission guards and service-level ownership checks remain separate from navigation visibility.
| Area | Source-verified boundary |
|---|---|
| Global roles | Four ranked roles; higher rank satisfies a declared lower role requirement. |
| Permissions | 156 canonical fine-grained keys are checked by PermissionsGuard. |
| Dealer membership | Owner, manager, and staff are scoped to a dealer and constrained by membership status. |
| Super administrator | Bypasses the permission list in the guard but not DTO, state, ownership, audit, or configuration rules. |
Verification
Verify the route, permission, response state, audit outcome, and public effect before closing the task. Record unknown or configuration-dependent behavior as a limitation.