Roles & permissions
What each role can see and do.
Every member has exactly one role. Mandali checks the role on the server for every action, so hiding a button is never the only protection.
Roles at a glance#
| Role | Who usually has it | Purpose |
|---|---|---|
| Admin | President, general secretary | Full control of the organization |
| Manager | Event, food, venue and ticketing leads | Plans and runs the season |
| Treasurer | Treasurer and finance team | Controls money and closes the books |
| Volunteer | Day-of crew | Helps on the day with limited access |
| Member | Advisors, observers | Read-only |
New members invited without a specific role join as Volunteer.
Permissions matrix#
✓ = allowed. Everyone in the organization can view the dashboard, seasons, days, meals and tickets.
| Action | Admin | Manager | Treasurer | Volunteer | Member |
|---|---|---|---|---|---|
| Create and edit seasons | ✓ | ✓ | |||
| Activate a draft season | ✓ | ✓ | |||
| Close or reopen a season | ✓ | ✓ | |||
| Delete a draft season | ✓ | ||||
| Add, edit, pause and delete days, meals and tickets | ✓ | ✓ | |||
| View the member list | ✓ | ✓ | ✓ | ✓ | |
| Invite, remove and change roles of members | ✓ | ||||
| Change organization name and logo | ✓ | ||||
| Change community type, time zone and currency | ✓ | ||||
| View the audit log | ✓ | ✓ | |||
| View the ledger and season money totals | ✓ | ✓ | |||
| Record cash, Zelle and cheque payments; void entries | ✓ | ✓ |
Coming with upcoming modules#
| Action | Admin | Manager | Treasurer | Volunteer | Member |
|---|---|---|---|---|---|
| Connect the committee's Stripe account | ✓ | ||||
| Issue refunds | ✓ | ✓ | |||
| Approve expenses and reimbursements | ✓ | ✓ | |||
| Submit their own expenses | ✓ | ✓ | ✓ | ✓ | |
| Check guests in | ✓ | ✓ | ✓ |
Why money and setup are split#
Managers set prices and inventory; treasurers control the books. Closing a season locks its setup so the year-end numbers can't change after the report is written. Reopening needs a written reason, which is stored in the audit log. This separation of duties is what auditors and members expect from a committee that handles community money.
Least privilege
Give people the smallest role that lets them do their job, and change it when their job changes. A food lead needs Manager during the season, not Admin.