🎯 ACCEPTANCE CRITERIA
AS A staff member
I WANT to log into the admin panel with limited privileges
SO THAT I can manage content without affecting other locations or system settings.
Acceptance Criteria
is_staff users can authenticate and see only their assigned content.
is_staff can create and edit events pages and announcements for their location only.
is_staff cannot create superusers change user roles or modify other locations.
Permission errors surface clearly with guidance on how to request elevated access.
✅ TASKS
📋 MoSCoW Priority
MUST HAVE (Critical - Essential for product)
📝 Additional Context
No response
🎯 ACCEPTANCE CRITERIA
AS A staff member
I WANT to log into the admin panel with limited privileges
SO THAT I can manage content without affecting other locations or system settings.
Acceptance Criteria
is_staff users can authenticate and see only their assigned content.
is_staff can create and edit events pages and announcements for their location only.
is_staff cannot create superusers change user roles or modify other locations.
Permission errors surface clearly with guidance on how to request elevated access.
✅ TASKS
Define permissions for is_staff role.
Filter admin queries to restrict visibility by assigned location.
Implement UI constraints and checks to block forbidden actions.
Create help text and escalation flow for access requests.
Run penetration tests to ensure privilege separation.
📋 MoSCoW Priority
MUST HAVE (Critical - Essential for product)
📝 Additional Context
No response