Who can do what

"Who can do what" is the set of rules your app's cloud enforces: who may read, add, change and remove each kind of record. The rules live in the cloud itself, so they hold even if someone bypasses a screen.

The three questions

Before the first build that saves data, Yorki asks three questions:

Who can use your app?

• Anyone with an account: people sign up themselves and use the app.
• Anyone, no sign-in: visitors use it without an account.
• Only people I add: a closed group, such as an invited team, club or company.

Who sees what?

• Each person sees their own: records belong to the person who made them.
• Everyone sees everything: one shared space for all signed-in people.
• People see their team's: records are grouped by team or organisation.

Are there admins?

• Yes, some people have more rights: you name the roles, most powerful first, and can choose that only admins add and edit the content while everyone else reads it.
• No, everyone is equal.

Skip all keeps the recommended answers. With Only people I add, Yorki also asks who can create an account. You add the allowed addresses under Sign-up.

See the rules

Open Settings, Cloud, Who can do what:

• Your decision shows your three answers.
• Warnings point out rules that may not match your decision.
• By table lists each table with who may Read, Add, Change and Remove, as the cloud enforces it.

The ? button explains each phrase, such as "Anyone signed in" or "Only the person it belongs to".

Change the rules

• Change the decision. Answer the three questions again. Saving prepares one request in the chat that rewrites the rules to match. Nothing changes until you send it.
• Change the rules in chat. Describe a specific change, such as "Let staff edit every booking." The composer opens in Plan mode, so you can review the change before building it.

Checks before publishing

After a build that changes your cloud, Yorki tests the rules with throw-away accounts. If something still looks wrong, such as a table anyone can change, the publish dialog lists it before you publish. You can publish anyway, or ask for a fix in the chat first.