Grecos Workspace
Navigation remains inside site context. Existing modules are embedded as workspace sections, not unrelated global jumps.
Users, Roles & Permissions
Role-driven workspace access for platform owners, Nub Designs staff, client owners, editors, agencies, and future white-label partners.
Create an invitation placeholder scoped to this workspace.
Apply canonical roles; no hardcoded user rules.
Remove membership from this workspace scope.
Disabled users cannot access workspace.
Inspect effective permissions by role.
Workspace members
| User | Status | Roles | Access | Permission proof |
|---|---|---|---|---|
| Jason | active | platform_admin | allowed | analytics.view · content.menu.edit · content.update · deployments.manage · forms.manage · media.manage · organizations.manage · permissions.manage |
| Grecos Owner | active | site_owner | allowed | analytics.view · content.menu.edit · content.update · deployments.manage · forms.manage · media.manage · releases.publish · revisions.manage |
| Grecos Marketing | active | content_manager | allowed | analytics.view · content.menu.edit · content.update · forms.view · media.view · pages.view · releases.view · revisions.create |
| Grecos Manager | active | reviewer | allowed | analytics.view · content.view · forms.view · media.view · pages.view · releases.view · revisions.view · transactions.approve |
| Former Grecos Editor | disabled | site_editor | denied | analytics.view · content.menu.edit · content.update · forms.update · media.manage · pages.update · releases.view · revisions.create |
Access validation
| grecos_owner_platform_admin | denied |
| content_manager_edit_menus | allowed |
| content_manager_publish_releases | denied |
| reviewer_approve_transactions | allowed |
| reviewer_modify_content | denied |
| disabled_user_workspace_access | denied |
Roles
| Role | Permissions |
|---|---|
| platform_admin | 18 |
| organization_owner | 17 |
| organization_admin | 14 |
| site_owner | 14 |
| site_editor | 9 |
| content_manager | 9 |
| media_manager | 5 |
| form_manager | 4 |
| reviewer | 8 |
| read_only | 8 |
API and audit contract
workspace-scoped users, statuses, memberships, roles, invitation status
canonical roles and assignable scope
granular permissions by resource
invitation metadata and audit event user_invited
updated membership roles and audit event role_changed
status disabled and audit event user_disabled
Audit events: user_invited · user_accepted · role_changed · permission_changed · user_disabled · access_denied