User Roles & Permissions

TechTonic defines distinct user roles to tailor the app experience and secure access. Each role unlocks specific features and API permissions — making sure every user only sees what they’re supposed t

👥 User Roles Explained

🧑‍🎓 Student

Learners who explore, enroll, and complete courses. What they can do:

• Browse & enroll in courses

• Access lessons & track progress

• Download certificates after course completion

• Manage profile info (name, ProfilePic)

---

👩‍🏫 Instructor

Creators and managers of course content. Key powers:

• Create, edit & delete courses and lessons

• Upload videos, PDFs, and other resources

• Monitor student progress

• Engage with student feedback (if applicable)

---

🛡️ Admin

Platform overseers with full control. Responsibilities:

• Manage all users (students, instructors)

• Moderate content and reviews

• Access detailed reports & analytics

• Configure system-wide settings and integrations

---

🔐 Permissions Matrix

Feature	Student	Instructor	Admin
Browse & enroll courses	✅	✅	✅
Access lesson content	✅	✅	✅
Create/edit/delete courses		✅	✅
Upload/manage content files		✅	✅
Manage user accounts			✅
Moderate reviews/comments			✅
View reports & analytics			✅
Configure system settings			✅

---

🎨 UI Impact by Role

• Students: Simplified dashboard focused on learning journey, progress, certificates, and profile settings.

• Instructors: Access to course builder tools, content management UI, and student analytics.

• Admins: Comprehensive admin panel with user management, content moderation, reports, and configuration options.

---

🔗 API Access Control

Our backend enforces role-based authorization:

• Students access only their personal data and enrolled courses.

• Instructors access course creation and content upload endpoints.

• Admins have unrestricted access for management and analytics.

Example:

bashCopyEditGET /api/courses            # Public or student-accessible  
POST /api/courses                       # Instructor & Admin only  
DELETE /api/users/:id                   # Admin only