Roles and access
Who can see and change what in ruumica today, from organisations and sign-in to roles, and who records and signs a delivery.
Your organisation is the boundary
Every person, device and project belongs to one organisation. You see only your organisation’s projects and files. Another organisation’s project answers exactly as if it did not exist, and a file that another organisation holds is never revealed to you, even if it is identical to yours.
Signing in
You sign in to the field app with your work e-mail through ruumica’s login page. Signing in alone is not enough: your organisation must have registered you as a user. A person who leaves is disabled, never deleted, so their earlier work stays attributed to them; a disabled account loses access within 15 minutes, and anything it still sends is refused (USER_DISABLED).
Roles
Each user has one role:
| Role | Who |
|---|---|
TECH |
Field crew: captures nodes, photos and measurements. |
OFFICE |
Office and QA: checks results, settles conflicts, prepares deliveries. |
SURVEYOR |
The certified surveyor who signs deliveries. |
ADMIN |
Manages the organisation’s users and devices. |
Today the role is recorded, but access is decided by organisation: every active user of an organisation can do what the app allows for that organisation’s projects. Permissions per role arrive with conflict review and surveyor sign-off (Feature status).
Who exports and who signs
- Exporting runs on the organisation’s server with
asbuilt export. Whoever operates the server can export. When a package is recorded, it names the user it is recorded for (--created-by), who must belong to the project’s organisation. - Signing: a delivery is meant to be co-signed by the organisation’s certified surveyor with Estonian eID, over the package’s
manifest_sha256(Exports never change). Surveyor sign-off is not built yet. Until it is, the closeout book names the surveyor on record, and no package carries a signature.
Every change has an author
Every op from the field carries the user who sent it, checked by the server against the organisation of the project. Recorded packages name who recorded them. Nothing in a project changes anonymously.