Managing users
ADMINISTRATOR The Users tab lives under Admin → System → Users.Roles
| Role | Inserts as | Notes |
|---|---|---|
superintendent | safe default | Sees only assigned vessels |
supervisor | requires explicit selection | Approves drafts, edits KB |
administrator | one account ever | Re-creating a second administrator is allowed but discouraged |
v2.29.0 migration 0084 renamed the legacy 'admin' literal to 'administrator'. Backwards-compat alias preserved.
Department
Three departments — TSI (Technical), MSI (Marine — Marine Superintendent, never "Marine Inspector"), ITCOM (IT / Comms). Used for routing notifications and filtering work queues. A superintendent has exactly one department; a supervisor or administrator has none.
Creating a user
- Admin → System → Users → Add user
- Username (unique), email (used for email mirror), role, department (if superintendent)
- The system mints a temporary password and emits a one-time message via the in-app messenger; the user changes it on first login
- Vessel assignments — pick which vessels this superintendent sees in the sidebar
Disabling a user
Soft-delete only — users.disabled_at = now(). The login route rejects disabled users. Their historical drafts remain attributable.
Vessel assignments
vessel_assignments(user_id, vessel_id). PATCH /api/admin/vessel-assign (308-aliased pre-v2.29.9). Supervisors and admins see all vessels regardless of assignments.