Introduction
The account, profiles and roles
One account per practice, one profile per person, permissions that follow the role.
Signing in
Signing in happens in two steps. First the practice login, with its address and password. Then the profile picker, listing every member of the practice, the way a streaming service does it.
The chosen profile is verified server-side, then held in a cookie the page code cannot read. On every action, the profile is re-checked against the practice it claims to belong to: a hand-edited cookie simply fails verification.
The roles
- Owner, dentist, practice manager: they can generate sequences.
- Assistant, hygienist, front desk: they manage patients, the agenda, payments, and can read everything else, without triggering a generation.
The restriction sits on generation because a sequence is a proposed treatment plan, with a real cost on every run. It is enforced on the server, not merely hidden in the interface.
Adding someone
In Settings, Users tab, create a profile with a name, a role and, if you like, a contact and a specialty. A profile is not a login: the practice keeps a single login, and each person picks their profile on arrival.
Only practitioners who generate plans take a paid seat. Assistants and front desk are free and unlimited: there is no reason to share a profile.