🔐 How Role Editing & Assignment Works in GoBuid
GoBuid provides strict role hierarchy rules to help you safely manage permissions across your company. This guide explains who can change or assign roles, the limits of self-downgrading, and how to manage Co-owner access.
🎯 Change Role Rules
Users can only change roles for members with lower permission levels.
| Action | Allowed? | Notes |
|---|---|---|
| Change role of someone with lower level | ✅ | Example: Admin → Member |
| Change role of someone with equal level | ❌ | Admin cannot edit another Admin |
| Change role of someone with higher level | ❌ | Admin cannot edit Co-owner |
| Owner editing any role | ✅ | Owner has full control |
🔎 GoBuid enforces a strict role hierarchy to prevent lateral or upward permission changes.
🧱 Assign Role Rules
When assigning roles (e.g. inviting a new member), users can only assign roles lower than their own.
| Action | Allowed? | Notes |
|---|---|---|
| Assign a lower role | ✅ | e.g., Co-owner → Admin |
| Assign an equal or higher role | ❌ | e.g., Admin → Admin / Admin → Co-owner |
| Assign Co-owner | ❌ (except Owner) | Only the Owner can assign Co-owners |
| Assign Owner | ❌ | Owner role is system-reserved and cannot be assigned |
🚫 Self-Demotion Rules
To prevent users from accidentally locking themselves out of key admin functions:
| Action | Allowed? | Notes |
|---|---|---|
| Downgrade your own role | ❌ | You cannot remove your own admin privileges |
| Change your own role (via Admin Console) | ❌ | Not permitted |
| Ask someone with higher privileges to change it | ✅ | e.g., Owner changes Co-owner’s role |
🛡 This ensures that key roles like Owner and Co-owner are always protected.
👁️ Account Owner & Co-owner Section Visibility
The Account Owner & Co-owner section can only be seen and used by specific roles.
| Role | Can View? | Can Edit? | UI Behavior |
|---|---|---|---|
| Owner | ✅ | ✅ | Full access to add/remove Co-owner |
| Co-owner | ✅ | ❌ | Read-only; cannot assign Co-owner |
| Others (Admin, Member) | ❌ | ❌ | Section hidden |
🔒 UI Behavior for Co-owners
- “Remove” button → disabled
- “Select a member” dropdown → disabled
📘 Summary
| Scenario | Who Can Perform |
|---|---|
| Assign Admin Role | Anyone (based on level) |
| Assign Co-owner | Only Owner |
| Change others’ roles | Only for roles lower than yours |
| Downgrade your own role | Not allowed |
| Access Permissions page | Owner, Co-owner, Admin |
| Access Account Owner section | Owner: full / Co-owner: view-only |