Security
Access Matrix
Summary of current role capabilities and the access-control review completed for the protected API surface.
| Capability | User | Moderator | Admin |
|---|---|---|---|
| Register and authenticate | ✓ | ✓ | ✓ |
| Manage own account settings | ✓ | ✓ | ✓ |
| Upload files and trigger analysis on owned files | ✓ | ✓ | ✓ |
| Read owned jobs, artifacts and storage objects | ✓ | ✓ | ✓ |
| Submit and read own bug reports | ✓ | ✓ | ✓ |
| Review bug reports and events | — | ✓ | ✓ |
| Update bug report status and priority | — | ✓ | ✓ |
| Download clean report attachments | ✓ | ✓ | ✓ |
| Read admin jobs and operational KPIs | — | ✓ | ✓ |
| Read contact messages | — | ✓ | ✓ |
| Manage user roles and tiers | — | — | ✓ |
| Change system settings | — | — | ✓ |
| Run retention operations and orphan cleanup | — | — | ✓ |
| Review the audit log | — | — | ✓ |
| Queue fingerprint backfill | — | — | ✓ |
- Register and authenticateUser: ✓Moderator: ✓Admin: ✓
- Manage own account settingsUser: ✓Moderator: ✓Admin: ✓
- Upload files and trigger analysis on owned filesUser: ✓Moderator: ✓Admin: ✓
- Read owned jobs, artifacts and storage objectsUser: ✓Moderator: ✓Admin: ✓
- Submit and read own bug reportsUser: ✓Moderator: ✓Admin: ✓
- Review bug reports and eventsUser: —Moderator: ✓Admin: ✓
- Update bug report status and priorityUser: —Moderator: ✓Admin: ✓
- Download clean report attachmentsUser: ✓Moderator: ✓Admin: ✓
- Read admin jobs and operational KPIsUser: —Moderator: ✓Admin: ✓
- Read contact messagesUser: —Moderator: ✓Admin: ✓
- Manage user roles and tiersUser: —Moderator: —Admin: ✓
- Change system settingsUser: —Moderator: —Admin: ✓
- Run retention operations and orphan cleanupUser: —Moderator: —Admin: ✓
- Review the audit logUser: —Moderator: —Admin: ✓
- Queue fingerprint backfillUser: —Moderator: —Admin: ✓
Audit Notes