🔑 The platform uses Role-Based Access Control (RBAC) with 8 roles and 24 permissions. Province-scoped roles (Province Admin, Editor) are further restricted by Row Level Security (RLS) policies in PostgreSQL.
| Role | Description | Province Scoped? | Users | Permissions |
|---|
| super_admin | Full system access, all provinces | No | 2 | 24/24 |
| admin | Manage users, content, settings | No | 10 | 20/24 |
| province_admin | Admin for assigned province only | Yes | 7 | 16/24 |
| content_manager | Manage all content, approve articles | Optional | 15 | 14/24 |
| reviewer | Review and approve submitted content | Optional | 20 | 8/24 |
| editor | Create/edit draft content | Yes | 42 | 6/24 |
| sme_user | Registered SME — bookmarks, tracker | No | 7,890 | 3/24 |
| public_user | Anonymous visitor | No | ∞ | 2/24 |
| Permission |
super_admin | admin | province_admin | content_manager | reviewer | editor | sme_user | public |