Permissions by role
Each person sees and does only what their role allows.
- Two roles today: administrator and salesperson
- Permissions are checked on the server for every action, and refused attempts are logged
- Salespeople only ever see their own records
- Actions a user cannot perform are hidden, not merely disabled