Roles and Permissions

R's DocManager uses a 4-tier role hierarchy. Each role has specific capabilities for document creation, viewing, deletion, and management.

Role Hierarchy

A higher-weighted role "outranks" lower roles. This determines who can delete whose documents and who can manage whom.

Important: Only God has cross-organization access. Super Admin, Admin, and User roles are all scoped to their organization.

User (Weight: 10)

The default role for new accounts.

Document Creation

• Create documents via upload or write mode
• Default classification: Organization
• All status options available: Draft, Under Review, Published, Archived

Document Access

• Can only see their own documents
• Published, Drafts, Archived tabs show only their own docs
• For Me tab shows docs assigned to them for review (if any)

Document Deletion

• Can only delete their own documents

Other Capabilities

• Run AI actions with personal API keys
• Manage personal API keys and profile settings
• Add comments on documents with Comment access level or higher

Pages Access

• Create, edit, share, and delete their own pages (full_access on own pages)
• See any page in their organization whose visibility is org
• See role pages only if their own role meets the page's minimum role
• See restricted pages only when an explicit share has been granted to them
• Can be invited to pages with view, comment, edit, or full_access

Cannot Do

• See other users' documents
• Delete other users' documents
• Manage users or access admin panels
• Be selected as a document reviewer
• Edit or delete pages they don't own unless a share grants it

Admin (Weight: 50)

Organization administrators with expanded access.

Document Creation

• Same as User
• Default classification: Organization
• Can be selected as a document reviewer

Document Access

• View all documents within their organization
• All tabs show org-wide documents (not just their own)

Document Deletion

• Delete their own documents
• Delete any User's documents (outranks User: 50 > 10)
• Cannot delete Super Admin or God documents

Other Capabilities

• Manage users in their organization
• View organization-level audit logs
• View organization statistics

Pages Access

• Implicit full_access on every page in their organization
• Can edit, share, change visibility, cover, archive, and delete any org page
• Cannot see or manage personal (org-less) pages, even if the owner is in the same organization
• Cannot see or manage pages in other organizations

Super Admin (Weight: 75)

Organization administrators with elevated privileges for user management and approvals.

Document Creation

• Same as User
• Default classification: Organization
• Can be selected as a document reviewer

Document Access

• View all documents within their organization
• All tabs show org-wide documents (not just their own)
• Cannot see documents from other organizations

Document Deletion

• Delete their own documents
• Delete any User's documents (outranks User: 75 > 10)
• Delete any Admin's documents (outranks Admin: 75 > 50)
• Cannot delete God documents or other Super Admin documents

Other Capabilities

• Promote users up to the Super Admin role within their organization
• Manage all users within their organization
• Approve or reject pending membership requests for their organization
• Access system settings
• View organization-level audit logs
• Export user data (CSV/JSON)

Limitations

• Cannot access other organizations' data
• Can only manage users within their own organization
• Cannot assign God role or promote users to Super Admin

Pages Access

• Implicit full_access on every page in their organization
• Can edit, share, change visibility, cover, archive, and delete any org page
• Cannot see or manage personal (org-less) pages
• Cannot see or manage pages in other organizations

God (Weight: 100)

Platform-wide control with unique multi-org capabilities.

Document Creation

• Can post documents to all organizations at once or select specific ones
• File is uploaded only once to storage (not duplicated per org)
• Default classification: Public
• Default access level: Comment

Document Access

• View all documents across all organizations
• Documents are deduplicated in the listing (same title + owner shown once)
• Can filter by organization in the document listing

Document Deletion

• Delete their own documents
• Delete any public document regardless of owner role
• Cannot delete non-public documents owned by others

Status Management

• When God changes a document's status, all copies across organizations update together
• This ensures a document published by God appears as published in every organization

Other Capabilities

• Full God Panel with platform overview
• Access to all organizations and their documents if public (only role with cross-org access)
• Manage any user and assign any role including God
• View and regenerate organization codes
• Bypass document password protection
• Platform-wide system settings and audit logs
• Create documents in multiple organizations simultaneously
• Can switch between organizations and view any org's data

Pages Access

• full_access on every page in every organization, including personal pages
• The only role that can see and edit pages across organizational boundaries
• Can publish a page as a public link and revoke it at any time

Role Assignment

• New users start as User
• Admins cannot change roles
• Super Admins can promote users up to Admin
• God users can assign any role including God
• Super Admin access must be requested by contacting rs4101976@gmail.com

Delete Permission Summary

Pages Permission Summary

See Pages for the full visibility tiers, permission levels, and share mechanics.