Documentation home / Workspace administration / Permissions

Permissions¶

Control the grantable actions of active workspace members through a permission table.

At a glance¶

In Trapitan: /workspaces/{workspace_id}/permissions.

Who can open this page: Verified manage_permissions and enabled entitlement.

What you see¶

Open Permissions from the Members page's Permissions action. It is not a profile-menu item. The table shows each active membership's Travian account and permission checkboxes. The owner row has an Owner badge and checked, disabled cells. The seven columns are Collection, View intelligence, Manage members, Manage permissions, Manage push calls, Manage def calls and View Artifacts 3 Waves Plan. The current page renders no entitlement switch.

Who fills in each field¶

A workspace-manager with manage_permissions changes non-owner member grants. The workspace-owner has implicit grantable permissions; those owner cells are read-only and are not ordinary stored grants that a manager can remove. Workspace entitlement is separate backend access configuration, not a displayed field or editable switch in this template.

Calculations¶

No derived values on this page.

Freshness and updates¶

The initial table reads active memberships and their stored grants. A successful checkbox update returns the current permissions for that row and updates its cells. The control is disabled while saving, and Permissions saved appears afterward. A failed save reverses the clicked checkbox and shows Permission change could not be saved. Changes to other users or membership status require a fresh page load to reflect the latest roster of rows.

Actions and permissions¶

Who can take action: The actor and permission for each action are listed below. Who can perform each action depends on the server's checks, independently of whether navigation or a button is visible.

In Trapitan, check or uncheck a non-owner cell to grant or revoke that action. Opening the page and making changes both require enabled entitlement and verified manage_permissions authorization. A manage_members grant does not give permission-management access. The server also validates the action against the seven grantable actions, scopes the membership to the workspace and protects the owner row even on a direct request.

In Trapitan — removing permission management: Unchecking Manage permissions removes the ability to manage grants. The server requires the exact confirmation value Remove permission management; the current browser code sends that value automatically. There is no separate typed confirmation dialog in this interface. Removing your own management grant can prevent your next update or page load.

Enable/disable entitlement is an endpoint-only action requiring direct workspace ownership and a verified active membership. This page has no toggle for it. Owner identity cannot be conferred by granting Manage permissions. The owner endpoint can change entitlement even when it is currently disabled; permission-table access and grant updates still require it to be enabled.

States and edge cases¶

No active memberships displays an empty-table message. Owner cells cannot be edited; the endpoint also rejects attempts to change owner grants. Unknown or nongrantable actions are rejected, and a membership from another workspace is not found. Removal of manage_permissions without the exact confirmation value fails. An unverified owner has no verification bypass. A disabled entitlement, revoked membership or absent grant blocks protected direct URLs and mutations; hiding navigation alone is not an authorization mechanism. Member grant controls do not transfer ownership, create memberships or change another member's linked Travian account.

Related pages¶

• Members
• Settings
• Invitations

Source references¶

Source reviewed: 2026-10-05