Suite
This member
Loading status…
Pending
| Id | Op | Proposed by |
|---|
Sign-in order
The members that serve sign-in for the suite, first to last. Each is sent the suite's password hashes and signs people in at its own address; a member signs people in at the first one that answers. Adding a member waits for a second admin under Pending. Removing one or changing the order applies at once. Only the master takes a change.
| # | Member | Signs in at |
|---|
Tree
The suite's orgs, products and components, with what each member holds under them. Retire hides a node, and everything under it, in every member; nothing is destroyed and nothing new attaches. Delete removes a retired node that nothing holds anything under, once a second admin approves it under Pending.
| Name | Kind | State | Held |
|---|
People
Create a person with an email and a password, or edit someone already in the directory. Create posts /v1/suite/people; the password is hashed before it is logged, and this page never sends it as a change. Save email posts actor_upsert. Reset password posts to /v1/suite/people/{id}/password. Groups are direct membership. A permission is changed by assigning or removing a role that contains it. An agent is not created here and has no password. Only the master takes a change.
Groups this person is in directly.
Roles assigned to this person, and the permissions in each role. Access that arrives through a group is listed under the table and is changed on that group.
| Role | Permissions | Node |
|---|
Older grants of Read, Write or Admin for this person.
| Level | Node |
|---|
Access
Assign a role to a person or a group at a node. Read, Write and Admin are built in. Every other role is one a suite member registered. Only the master takes a change.
| Who | Role | Node |
|---|
Older grants of Read, Write or Admin. A new grant is an assignment of a role, above.
| Who | Level | Node |
|---|
Groups
A group is made here. It holds people and other groups, and a role assigned to it reaches its members. Deleting one waits for a second admin.
| Group | Members |
|---|
Permissions
Each suite member registers the permissions it checks and the roles that bundle them. This list is that registration.
| Member | Permission | Description |
|---|
| Member | Role | Permissions | Level |
|---|
Abandoned
Live nodes under a retired one: move them somewhere live before the retired node is deleted. Orphans: nodes the suite deleted while a member still held something under them; the member keeps that data, out of its lists. Restore brings the node back under its own id, so that data comes back with it.
| Node | Under | Held |
|---|
Unresolved people
People here whose email matches someone in the suite, but not verified on both sides. Pair them if they are the same person; the next join plan aliases them.
| Local id | Suite id |
|---|
Nodes to add
Orgs, products and components here that the last join plan would add to the suite as new. If one is a node the suite already has under another name, pair it; this member's id then becomes an alias and nothing filed under it moves.
| Kind | Name here | Same as |
|---|
Audit
| Seq | Term | Op | By | When |
|---|