Home About ReadFocus Programs Pricing Professionals Resources Community Contact
Dashboards by Role 👨‍👩‍👧 Parent Dashboard 🧒 Child Learning Portal 🩺 Professional Dashboard 👩‍🏫 Teacher Dashboard 🏛️ School Dashboard 👑 Super Admin Console
Log In Get Started Free
SECURITY & ACCESS ARCHITECTURE Standard Enterprise RBAC

Role-Based Access Control (RBAC) Matrix

Strict access boundary specifications defining which modules and data scopes are visible or hidden for each authenticated role.

👑 Go to Super Admin 🚀 Launch Parent Portal
Select Role to Inspect Hidden & Visible Modules:
👨‍👩‍👧
Parent
3 Hidden / 9 Active
🧒
Child / Student
6 Hidden / 6 Active
🩺
Professional / Doctor
3 Hidden / 9 Active
👩‍🏫
Teacher / Educator
8 Hidden / 4 Active
🏛️
School Admin
4 Hidden / 8 Active
👑
Super Admin
0 Hidden / 12 Active
❌

Hidden After Login for Parent

3 Modules Blocked
📋 Consultation Notes
❌ Forbidden (Hidden)
👥 User Management
❌ Forbidden (Hidden)
⚙️ System Settings
❌ Forbidden (Hidden)
👁️

Visible Modules & Scope for Parent

9 Modules Accessible
👨‍👩‍👧 Parent Profile
✅
🧒 Child Profile
Own
📝 Assessments
Own Child
📚 Learning
Own Child
🩺 Therapy
Own Child
📅 Appointments
Own
🌐 Community
✅
💳 Payments
Own
⭐ Subscription
Own

Complete RBAC Matrix Table

Role-Based Access Control matrix mapping permissions across all user roles
Legend: ✅ Allowed | ❌ Hidden | Own/Assigned | Class/School | Limited | Controlled
Module Parent Child Professional Teacher School Admin Super Admin
👨‍👩‍👧 Parent Profile ✅ ❌ ❌ ❌ ❌ ✅
🧒 Child Profile Own Own Assigned Class School All
📝 Assessments Own Child Own Assigned Limited School All
📚 Learning Own Child Own Assigned Class School All
🩺 Therapy Own Child Limited Assigned ❌ Limited All
📅 Appointments Own Limited Own ❌ ❌ All
📋 Consultation Notes ❌ ❌ Own ❌ ❌ Controlled
🌐 Community ✅ Limited ✅ ✅ ✅ All
💳 Payments Own ❌ Own ❌ School All
⭐ Subscription Own ❌ Own ❌ School All
👥 User Management ❌ ❌ ❌ ❌ School ✅
⚙️ System Settings ❌ ❌ ❌ ❌ ❌ ✅
🛡️ Enforcement Mechanism: Implemented at both the view rendering layer (menu exclusion) and server-side controller level via rbac_enforce_access().
Open Master Admin Control →