V7.12.300.29 Permissions Inspector ยท User Management Aligned

Permissions Inspector

This page now works with the User Management hub and Feature Shop direction. It reads the same permission truth area, explains why a user can or cannot do something, and stays read-only until the official schema/RLS/payment launch plan is ready.

Checking global helpers...
Read-only permissions inspector. No writes, no billing, no role changes.
๐Ÿ”๐Ÿงญ
Current account--

Checking...

Visible profiles--

Reads sb_profiles only when owner/admin verified.

Writes here0

Inspector only.

Theme railOn

Rail follows injected theme variables.

What this does

Pricing sells it

Feature Shop keeps the commercial ideas visible without real payment.

User Management applies current controls

User Management owns real current profile changes and the delete request queue.

Permissions explains it

This page turns profile fields into clear allow/lock reasoning.

Supabase enforces it later

Real locks need database fields, RLS and route checks. HTML-only locks are not security.

Simple version: this is the live-readable rulebook that sits between Feature Shop and User Management.

Live profile permission reasoning

Find profile
Feature to reason about
Result mode

Roles

Current database role checks are strict. Do not add future role names until the Supabase constraint/policies are updated deliberately.

Plans

Feature matrix

This mirrors the Feature Shop plan/add-on direction, but remains read-only.

Current live controls

Flag dictionary

Schema later

plan_key

Main plan: free_viewer, creator_growth, creator_pro, studio_business, platform_owner.

account_status

active, limited, restricted, banned, review.

permissions_json

Per-feature add-on flags, creator gates, builder packs and storage/video packs.

role/admin guard

Normal users must never self-update role, can_submit, plan or future paid fields.

RLS policies

Hard rules need database policies, not just page buttons.

audit log

User Management already reads audit history. Future permission changes need audit entries too.

Do not run schema changes from this page. Columns and RLS get added later, deliberately, when the launch/payment plan is official.

Safety

No writes

This page does not update users, roles, plans, policies or billing.

No fake security

It explains locks; it does not enforce final locks alone.

No billing

Payment-related features stay preview-only.

No destructive actions

Account deletion remains in Profile request flow + User Management server-side action only.

User Management owns current real updates. Supabase RLS owns real security. This inspector stays read-only.

Debug

Waiting...

V7.12.300.29 Permissions Inspector - global header/footer/theme helpers, theme rail, Supabase read-only profile reasoning, no writes.