Define role and permission model
Roles, permissions, and route rules are now modeled in frontend-safe TypeScript.
FoxPlot Admin
Access Control
Review roles, permissions, protected routes, portal access rules, and production hardening steps before FoxPlot connects full backend authorization.
Routes
33
Public
10
Account
3
Portal
8
Admin
12
Roles
6
Demo Evaluator
Test role access
Select a role and route to preview what should be allowed or blocked once server-side enforcement is connected.
Role
Access Result
Blocked
This role should be blocked from the selected route in production.
Required roles
AdminSuper Admin
Missing permissions
View revenue
Role Permissions
Author capabilities
These permissions should later come from trusted server-side user records, not from client-side state.
View public library
VIEW_PUBLIC_LIBRARY
Manage account safety
MANAGE_ACCOUNT_SAFETY
Submit author content
SUBMIT_AUTHOR_CONTENT
Claim author ads
CLAIM_AUTHOR_ADS
Request author payouts
REQUEST_AUTHOR_PAYOUTS
Route Rules
Current access map
This table defines how each major FoxPlot route should be protected once production authentication and authorization are connected.
| Route | Risk | Access | Roles | Permissions |
|---|---|---|---|---|
Homepage / | Public | Public | No role required | No permission required |
Public Library /library | Public | Public | No role required | View public library |
Privacy Policy /privacy | Public | Public | No role required | No permission required |
Terms and Conditions /terms | Public | Public | No role required | No permission required |
Content Policy /content-policy | Public | Public | No role required | No permission required |
Advertising Policy /advertising-policy | Public | Public | No role required | No permission required |
Become an Author /become-author | Public | Public | No role required | No permission required |
Become an Advertiser /become-advertiser | Public | Public | No role required | No permission required |
Sign Up /sign-up | Public | Public | No role required | No permission required |
Report a Concern /report | Public | Public | No role required | No permission required |
Account Dashboard /account | Account | Protected | ReaderAuthorAdvertiserAdminSuper Admin | Manage account safety |
Account Safety Settings /account/safety | Account | Protected | ReaderAuthorAdvertiserAdminSuper Admin | Manage account safety |
Account Privacy Requests /account/privacy | Account | Protected | ReaderAuthorAdvertiserAdminSuper Admin | Manage account safety |
Author Dashboard /author | Portal | Protected | AuthorAdminSuper Admin | Submit author content |
New Author Submission /author/submissions/new | Portal | Protected | AuthorAdminSuper Admin | Submit author content |
Author Ads to Claim /author/ads | Portal | Protected | AuthorAdminSuper Admin | Claim author ads |
Author Appeals /author/appeals | Portal | Protected | AuthorAdminSuper Admin | Submit author content |
Author Payout Requests /author/payouts | Portal | Protected | AuthorAdminSuper Admin | Request author payouts |
Advertiser Dashboard /advertiser | Portal | Protected | AdvertiserAdminSuper Admin | Submit ads |
New Ad Submission /advertiser/ads/new | Portal | Protected | AdvertiserAdminSuper Admin | Submit ads |
Advertiser Campaigns /advertiser/campaigns | Portal | Protected | AdvertiserAdminSuper Admin | Manage ad campaigns |
Admin Dashboard /admin | Admin | Protected | AdminSuper Admin | View admin dashboard |
Content Review Queue /admin/content-review | Admin | Protected | AdminSuper Admin | Review content |
Reports and Enforcement /admin/reports | Admin | Protected | AdminSuper Admin | Review content |
Privacy Requests /admin/privacy-requests | Admin | Protected | AdminSuper Admin | Manage access control |
Safety Center /admin/safety | Admin | Protected | AdminSuper Admin | Manage platform safety |
Access Control /admin/access | Admin | Protected | AdminSuper Admin | Manage access control |
Launch Readiness /admin/launch-readiness | Admin | Protected | AdminSuper Admin | Manage access control |
Backend Readiness /admin/backend-readiness | Admin | Protected | AdminSuper Admin | Manage access control |
Author Management /admin/authors | Admin | Protected | AdminSuper Admin | Manage authors |
Ad Campaign Review /admin/ads | Admin | Protected | AdminSuper Admin | Manage ads |
Payout Review Queue /admin/payouts | Admin | Protected | AdminSuper Admin | Review payouts |
Revenue Analytics /admin/revenue | Admin | Protected | AdminSuper Admin | View revenue |
Production Checklist
Access-control hardening steps
These items should be completed before FoxPlot is submitted for broad public launch or mobile app store review.
Connect roles to authenticated users
Next production step is storing roles in Clerk metadata, database records, or a server-side authorization table.
Protect private routes server-side
Admin, author, advertiser, payout, privacy, report, and account routes should be enforced in middleware or server components before launch.
Add audit logs for sensitive actions
Admin decisions, payout changes, author suspensions, ad approvals, privacy requests, reports, and role changes should create permanent audit records.
Harden production route exposure
Near final launch, review private routes, source maps, metadata, internal filenames, and authorization boundaries.