Users & roles

Permissions are checked in the interface, not just used to hide menu items. Switch identity from the top right and screens genuinely disappear or refuse to render.

People

Permission matrix

Audit log

append only — nothing in this application edits or removes an entry