Permissions

The following standard user policies are available for selection for users. These policy templates define fine-grained access controls that can be assigned to user groups.

Tip

Policy templates can be downloaded from the policy templates directory for reference and customisation.

Available Policy Templates

Policy	Description
base	Base policy with standard permissions.
base-ro	Base read-only policy.
achievement	Achievement management permissions.
events-management	Full events management permissions.
events	Events access permissions.
evidence	Evidence management permissions.
evidence-read-only	Evidence read-only permissions.
form-admin	Form administration permissions.
form-response	Form response review permissions.
gdpr	GDPR / privacy management permissions.
group-add-members	Permission to add members to groups.
group	Group management permissions.
group-members	Group members management permissions.
health-edi	Health and EDI data permissions.
membership	Membership management permissions.
membership-ro	Membership read-only permissions.
payment	Payment management permissions.
person	Person record management permissions.
person-ro	Person record read-only permissions.
send-messages	Permission to send messages.
sessions	Session / attendance permissions.
tasks-and-notes	Tasks and notes management permissions.
vehicle	Vehicle management permissions.
vehicle-ro	Vehicle read-only permissions.

Using Policy Templates

Policy templates are JSON documents that define the allowed HTTP methods for each resource endpoint. They are applied to user groups, which are then assigned to individual users via their flock permissions.

For details on how to create user groups and assign policies, see the Users documentation.