Admin
Who can get in, and what their dashboard leads with. Access itself is identical for every account — RLS decides it, and focus only changes the first screen.
🔒
Admins only
Your account can see everything in the directory, but not this page.
Accounts
Role decides what someone may change. Focus decides what they open onto.
| Person | Role | Dashboard focus | Password | |
|---|---|---|---|---|
Add someone
Creating a login needs the Supabase secret key, and a secret key in the browser would be readable by anyone who opens this page — which would hand over the whole database, RLS and all. So account creation runs from the machine, not from here. Add the person to scripts/create-users.mjs and run:
cd ~/Documents/worldzone-globalsales && npm run usersIt is idempotent — it creates who is missing, repairs who is broken, and leaves everyone else alone. The new person appears in the table above straight after.
Audit log
Role changes and other privileged writes, dated and attributed
| When | What | Target | By | Detail |
|---|