Pending queue
Permissions
- View pending contributions in my assigned groups.
- Demo status
- Not built
- Stakeholder review
- Not recorded
All rolesRoles + permissions · Working proposal
Group moderator
Manage assigned groups, review reports, approve, hide, or remove group contributions, manage participation, and escalate serious issues. No platform-wide authority.
Proposed from documented moderation requirement · 26 individual features
People behind this role
Authority is limited to assigned groups. Group ownership is separate.
Features and permissions
Story dots show implementation: green = done, amber = in progress, gray = planned. Feature delivery and stakeholder review are tracked separately. A dash means no story yet covers this role’s action.
Matrix updated 2026-10-19. Delivery labels use recorded evidence from 2026-10-07; Unverified means feature-level delivery is not established. Reviews remain Not recorded until a dated session or feedback record supports an outcome.
| Feature set | Feature | Permissions | User stories | Demo status | Stakeholder review |
|---|---|---|---|---|---|
| Moderation | Pending queue |
| Not built | Not recorded | |
| Approve contribution |
| Not built | Not recorded | ||
| Reject with reason |
| Not built | Not recorded | ||
| Reported content |
| Not built | Not recorded | ||
| Escalate report |
| Not built | Not recorded | ||
| Hide/remove content |
| Not built | Not recorded | ||
| Group management | Participation controls |
| Not built | Not recorded | |
| Reporting | Group health |
| Not built | Not recorded | |
| Account security | Password sign-in |
| Built in dev | Not recorded | |
| Sign out and session expiry |
| Built in dev | Not recorded | ||
| Password recovery |
| Built in dev | Not recorded | ||
| Account email change |
| Built in dev | Not recorded | ||
| Account password change |
| Built in dev | Not recorded | ||
| Signed-in devices |
| Built in dev | Not recorded | ||
| Two-step verification |
| Built in dev | Not recorded | ||
| Staff access | Accept internal invitation |
| Built in dev | Not recorded | |
| Account settings | Settings navigation |
| Unverified | Not recorded | |
| Your profile editor |
| Unverified | Not recorded | ||
| Interests and starting preferences |
| Not built | Not recorded | ||
| Notifications settings |
| Not built | Not recorded | ||
| Membership settings |
| Not built | Not recorded | ||
| Privacy settings |
| Not built | Not recorded | ||
| Payments and purchases | Saved payment methods |
| Not built | Not recorded | |
| Delivery addresses |
| Not built | Not recorded | ||
| Shop purchases and receipts |
| Not built | Not recorded | ||
| Membership billing history |
| Not built | Not recorded |
Moderation
Approve contribution
Permissions
- Approve eligible group content.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Reject with reason
Permissions
- Reject a submission and provide its reason.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Reported content
Permissions
- Review reports in my assigned scope.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Escalate report
Permissions
- Escalate issues beyond my assigned authority.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Hide/remove content
Permissions
- Hide/remove assigned-group content; detailed role checks are in D026; policy decisions remain prerequisites.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Group management
Participation controls
Permissions
- Manage assigned-group participation; detailed role checks are in D026; policy decisions remain prerequisites.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Reporting
Group health
Permissions
- View scoped group measures; assigned-group metrics defined in D037.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Account security
Password sign-in
Permissions
- Use verified email/password and a safe original return; role previews grant no real authority.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Sign out and session expiry
Permissions
- End the current session and reauthenticate after expiry/revocation.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Password recovery
Permissions
- Recover only my account through verified recovery; preserve required MFA and independent entitlement.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account email change
Permissions
- Change and verify only my sign-in email; preserve stable identity and independent org public contacts.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account password change
Permissions
- Change only my own password through recent-auth/MFA checks; D086 remains forgotten-password recovery.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Signed-in devices
Permissions
- Inspect/revoke my actual local sessions and prove effective denial; no cross-account access.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Two-step verification
Permissions
- Require MFA before assigned privileged work; MFA alone does not assign authority.
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Staff access
Accept internal invitation
Permissions
- Accept only my addressed staff invitation with verified email; actual MFA and current assignment gate internal work.
User stories
- Demo status
- Built in dev
- Stakeholder review
- Not recorded
Account settings
Settings navigation
Permissions
- Open my own shared settings from every permitted workspace; viewing settings does not change saved Home.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Your profile editor
Permissions
- Edit my own name, profile line, approved image choice and broad region; preserve optional blanks and unrelated settings.
User stories
- Demo status
- Unverified
- Stakeholder review
- Not recorded
Interests and starting preferences
Permissions
- Manage my own interests; only an explicit eligible Home/workspace choice changes the selected preference.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Notifications settings
Permissions
- Manage my own optional categories through the planned dedicated editor; no delivery channel or mandatory-message opt-out is inferred.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership settings
Permissions
- Read my own trusted plan/access state and open eligible existing membership flows; no paid professional/org grant or invented bill.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Privacy settings
Permissions
- Understand owner-only fields and explicit professional publication; only supported policy-backed controls may be offered.
- Demo status
- Not built
- Stakeholder review
- Not recorded
Payments and purchases
Saved payment methods
Permissions
- Manage only my own future provider-backed safe summaries; no raw card data, actual charge or organization billing authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Delivery addresses
Permissions
- Manage only my own private future delivery addresses; do not publish precise location or rewrite past orders.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Shop purchases and receipts
Permissions
- Read only my owned future order/receipt data; no fulfillment/refund/operator authority.
User stories
- Demo status
- Not built
- Stakeholder review
- Not recorded
Membership billing history
Permissions
- Read only my own future bills/receipts, independently of current free/paid access; no test-entitlement charge/renewal inference.
- Demo status
- Not built
- Stakeholder review
- Not recorded