User Roles & Permissions

Overview

AionTrack uses a role-based permission system with four distinct roles. Each role is designed for different use cases in post-production workflows.

Role Definitions

Admin - Project owners and post supervisors with full control over the project and team management.

Editor - Working crew members (editors, assistants, coordinators) who handle day-to-day production work.

Viewer - Clients, stakeholders, and external reviewers who need read-only access with ability to provide feedback.

Contributor - VFX artists, vendors, or contractors who should only see and work on their specifically assigned items.

---

Complete Permissions Matrix

Project Management

Action	Admin	Editor	Viewer	Contributor
Create project	✅	✅	❌	❌
View project	✅	✅	✅	✅ (limited)
Edit project details	✅	❌	❌	❌
Delete project	✅ (owner only)	❌	❌	❌
Archive/restore project	✅	❌	❌	❌

Team Management

Action	Admin	Editor	Viewer	Contributor
View team members	✅	✅	✅	❌
Invite team members	✅	❌	❌	❌
Remove team members	✅	❌	❌	❌
Change member roles	✅	❌	❌	❌
View team activity	✅	✅	✅	❌

Dashboard

Action	Admin	Editor	Viewer	Contributor
View dashboard	✅	✅	✅	✅ (filtered)
View activity feed	✅	✅	✅	✅ (own items)
View project stats	✅	✅	✅	✅ (own items)
View assignments	✅	✅	✅	✅ (own only)
Click activity details	✅	✅	✅	✅ (own items)

Clips

Action	Admin	Editor	Viewer	Contributor
View clips	✅	✅	✅	✅ (assigned only)
Import ALE files	✅	✅	❌	❌
Import Excel files	✅	✅	❌	❌
Create clip	✅	✅	❌	❌
Edit clip metadata	✅	✅	❌	✅ (assigned only)
Delete clip	✅	✅	❌	❌
Add tags to clip	✅	✅	❌	✅ (assigned only)
Link clips	✅	✅	❌	❌
Assign clip to member	✅	✅	❌	❌
Upload thumbnails	✅	✅	❌	❌
Search/filter clips	✅	✅	✅	✅ (assigned only)
Change column names	✅	✅	❌	❌

Timeline Commits

Action	Admin	Editor	Viewer	Contributor
View commits	✅	✅	✅	✅ (affecting assigned items)
Create commit	✅	✅	❌	❌
Upload OTIO files	✅	✅	❌	❌
Compare commits	✅	✅	✅	✅ (affecting assigned items)
Generate comparison	✅	✅	❌	❌

VFX Shots

Action	Admin	Editor	Viewer	Contributor
View VFX shots	✅	✅	✅	✅ (assigned only)
Create VFX shot	✅	✅	❌	❌
Edit VFX shot	✅	✅	❌	✅ (assigned only)
Delete VFX shot	✅	✅	❌	❌
Add tags to shot	✅	✅	❌	✅ (assigned only)
Link VFX shot	✅	✅	❌	✅ (assigned only)
Assign shot to member	✅	✅	❌	❌
Upload thumbnails	✅	✅	❌	❌
Search/filter shots	✅	✅	✅	✅ (assigned only)

Transcodes

Action	Admin	Editor	Viewer	Contributor
View transcodes	✅	✅	✅	✅ (assigned shots)
Upload EDL	✅	✅	❌	❌
View EDL details	✅	✅	✅	✅ (assigned shots)
Mark complete	✅	✅	❌	❌
Delete transcode	✅	✅	❌	❌

Comments

Action	Admin	Editor	Viewer	Contributor
View comments	✅	✅	✅	✅ (on assigned items)
Create comments	✅	✅	✅	✅ (on assigned items)
Edit own comments	✅	✅	✅	✅
Delete own comments	✅	✅	✅	✅
Mention team members	✅	✅	✅	❌

Tags & Settings

Action	Admin	Editor	Viewer	Contributor
View tags	✅	✅	✅	✅
Create tags	✅	✅	❌	❌
Edit tags	✅	✅	❌	❌
Delete tags	✅	✅	❌	❌
View VFX settings	✅	✅	❌	❌
Change VFX shot detection	✅	✅	❌	❌

User Profile

Action	Admin	Editor	Viewer	Contributor
View own profile	✅	✅	✅	✅
Edit own profile	✅	✅	✅	✅
View own role	✅	✅	✅	✅
Receive notifications	✅	✅	✅	✅

---

Role Selection Guide

When to use Admin

• Post-production supervisors
• Project managers
• Anyone who needs to manage team access
• Anyone who needs to modify project settings

When to use Editor

• Video editors
• Assistant editors
• Post coordinators
• VFX coordinators
• Anyone doing day-to-day production work

When to use Viewer

• Clients reviewing work
• Producers checking progress
• Directors giving feedback
• Stakeholders who need visibility but not edit access

When to use Contributor

• External VFX vendors (when you don't want them seeing other vendors' work)
• Freelance artists working on specific shots
• Contractors with limited scope
• Anyone who should only see their assigned work

---

Important Notes

Project Owner

• Every project has one owner (the creator)
• Owner has Admin permissions plus ability to delete the project
• Owner cannot be removed from the project
• Owner role cannot be changed
• Owner is displayed with a special badge

Contributor Isolation

• Contributors only see clips and VFX shots explicitly assigned to them
• They cannot see other team members or their work
• Dashboard and activity feed are filtered to show only their assignments
• This is enforced at the database level with Row-Level Security

Audit Logging

• All role changes are logged automatically
• Audit logs are preserved even if the project is deleted
• Email notifications are sent when roles change

Security

• Permissions are enforced both in the UI (hiding features) and backend (blocking API calls)
• Database Row-Level Security provides an additional safety layer
• Contributors cannot bypass assignment restrictions