Permissions Overhaul & Secure Access Update
This update delivers a major improvement to how permissions work across VerraLink, making access cleaner, more intuitive, and significantly more secure across both the website and Discord.
๐ Granular Permissions Overhaul
We rebuilt the permissions framework to ensure every user clearly understands what they can and cannot access, while preventing unauthorized actions.
Hidden Pages for Restricted Users
- Pages that a user does not have permission to access are now completely hidden
- No more misleading pages or redirect screens
- Applies to all major systems:
- Guild pages
- Commission tools
- Crafting requests
- Guild bank
- Activity controls
- Guild leaders can now confidently assign roles knowing restricted ranks won't even see features they cannot use
๐ค Web and Discord Permission Alignment
Permissions are now fully synchronized between the website and Discord.
- All Discord bot buttons follow the same permission logic as the website
- Users without the required permissions can no longer approve, edit, or trigger actions from embeds
- Hardened backend validation prevents any bypassing
- Legacy permission keys have been automatically migrated to the new structure
๐งน Selective Permission-Based Access
High-impact actions now require the correct permission flags everywhere.
- Commission approvals require explicit access
- Crafting request updates are permission-gated
- Treasury, audit log, and member tools are restricted to authorized roles
- Discord actions (apply, approve, attendance, commissions, crafting) follow the same access rules
This creates a unified, predictable, tamper-proof permission system.
Guild Reset Suite โ Now With DKP and AP Reset
As part of preparing for the December launch, we expanded the reset utilities available to guild admins.
- You can now reset DKP and Activity Points (AP) directly through the same Guild Reset interface
- Fully permission-gated under EDIT_ADMIN
- Safely clears all tracked DKP/AP while leaving the rest of your guild structure intact
- Ideal for seasonal wipes, pre-launch cleanups, or reorganizing guild progression
These updates create a unified, predictable, and tamper-proof permission system with cleaner administrative control.
๐ ๏ธ Fixes and Stability Improvements
- Clearer permission error messages
- Fixed cases where users could see pages they should not
- Better audit logging for restricted actions
- Strengthened security around guild management workflows
๐ฏ Why This Matters
This permissions overhaul makes VerraLink:
- Cleaner โ restricted users no longer see tools they cannot use
- Stronger โ Discord and web permissions now behave identically
- Safer โ sensitive guild tools are fully protected
- Future-proof โ ready for the upcoming Alliance System and multi-guild permission matrices