Permissions

User permissions and access control

Overview

The Seaty app uses two types of permissions to control what you can access: device permissions for hardware features, and user role permissions for administrative functions.

At its simplest, permissions answer one question: What can I do in this app?

Who uses this: All app users - attendees need device permissions, while staff and admins also need user role permissions.

Key capabilities:

  • Grant camera access for ticket scanning
  • Enable notifications for event updates
  • Add events to your device calendar
  • Access administrative features based on your role
  • View and understand your permission levels

How It Works

At a glance: Device permissions control hardware access on your phone, while user role permissions control feature access within Seaty - both must be correctly configured for full functionality.

1. Device permissions are requested

When you first use a feature requiring hardware access (camera, notifications, calendar), your phone asks you to grant permission. This is a one-time request per permission type.

2. User roles determine feature access

Organisation administrators assign permissions to team members through the web dashboard. Your role (customer, staff, admin) determines which features you can access.

3. Permissions combine for full access

To use a feature like ticket scanning, you need both the device permission (camera access) and the user role permission (scanning rights). Missing either one blocks the feature.

Think of it this way:

  • Device permissions are like keys to your phone's hardware - you control these
  • User role permissions are like access badges at work - your organisation controls these
  • Full access requires both the right key and the right badge

Device Permissions

System-level permissions that your phone's operating system grants to the app.

Camera Permission

Why needed: Scan QR codes on tickets for event entry validation.

When requested: First time you tap the scan button.

Granting permission:

  • iOS: Tap "OK" on the permission dialogue
  • Android: Tap "Allow" on the permission dialogue

If denied: You cannot scan tickets. Use manual ticket ID entry or another device with camera access.

Enable later:

  • iOS: Settings → Seaty → Camera → Enable
  • Android: Settings → Apps → Seaty → Permissions → Camera → Allow

Privacy: Camera only used for QR scanning. No photos or videos stored.

Why camera permission specifically? QR codes on tickets contain encrypted data that must be read visually - there's no alternative method that doesn't require camera access.

Notification Permission

Why needed: Stay informed about event updates, ticket purchases, and messages from event organisers.

When requested: During first launch or when enabling notification preferences.

Granting permission:

  • iOS: Tap "Allow" on the notification dialogue
  • Android: Tap "Allow" on the notification dialogue

If denied: No push notifications about events or tickets. All features still work, but you must manually check for updates.

Why notifications matter: Event organisers often send last-minute updates about venue changes, timing, or important information. Without notifications, you might miss critical updates.

Enable later:

  • iOS: Settings → Notifications → Seaty → Allow Notifications
  • Android: Settings → Apps → Seaty → Notifications → Enable

Calendar Permission

Why needed: Add event dates directly to your device calendar as reminders.

When requested: When you tap "Add to calendar" on an event.

Granting permission:

  • iOS: Tap "OK" on the calendar permission dialogue
  • Android: Tap "Allow" on the permission dialogue

If denied: "Add to calendar" feature won't work. You can still manually create calendar entries outside the app.

Enable later:

  • iOS: Settings → Seaty → Calendars → Enable
  • Android: Settings → Apps → Seaty → Permissions → Calendar → Allow

Background Audio Permission (iOS Only)

Why needed: Continue playing audio files (podcasts, music, recordings) when you lock your phone or switch apps.

When requested: Automatically enabled through app configuration.

Features:

  • Lock screen playback controls
  • Notification centre audio controls
  • Uninterrupted audio when phone is locked

User Role Permissions

Feature access within specific events and organisations. Managed by organisation administrators through the web dashboard, not device settings.

Permission Levels

RoleAccess
CustomerBrowse events, purchase tickets, view your tickets, access public event information and files
Staff/Team MemberCustomer permissions plus specific granted permissions (scanning, attendee lists, file access, etc.)
Organisation AdminFull access to all organisation features, create/edit events, manage team permissions, financial reports
Device (shared scanner)Limited to scanning tickets only, no personal data access, cannot modify events/orders, sees assigned events only

Why levels matter: Organisation admins grant specific permissions to staff members to control access to sensitive data and administrative functions. This ensures staff only see information relevant to their role, protecting both customer privacy and business data.

Viewing Your Permissions

How to check your permissions:

  1. Navigate to an event screen
  2. Tap the menu icon (three dots or hamburger menu)
  3. Select "My Permissions"

What you'll see:

  • Permission groups: Event, Organisation, Tour, Order permissions
  • Granted permissions: Shown in green with a checkmark
  • Denied permissions: Shown in red with a cross
  • Admin status: Organisation administrators have all permissions automatically

Common Permissions

Event Permissions:

  • Find orders: Search for orders, view attendee and ticket details
  • Summary: View event statistics, sales data, and key metrics
  • Banking & withdrawals: Manage event financials and withdrawals
  • Feed: View activity feed (recent orders, refunds, requests)
  • Scans: View ticket scans for the event
  • Admit & redeem: Admit attendees and redeem tickets/merchandise
  • Mail: Send emails or notifications to event attendees
  • Edit: Full editing rights for event details and configuration
  • Export data: Export attendee lists, orders, and reports
  • Event admin files: Access event-specific admin files in Dropbox

Order Permissions:

  • View: View order details, tickets, and attendee information
  • Order as an admin: Book tickets as admin without payment, with additional options
  • Cancel & refund: Cancel orders and process refunds
  • Balance payments: Manage and record balance payments
  • Transfer ownership: Transfer order ownership to another user
  • Swap: Swap tickets or seats between orders
  • Ticket flags: Flag tickets for review or special handling

Organisation Permissions:

  • Summary: View organisation dashboard and key metrics
  • Events: View information on all organisation events
  • Attendees: Access attendee lists across all organisation events
  • Compare events: Compare performance between different events
  • Tours: Manage and view tours
  • Statements: View and download attendee statements
  • Members: Manage organisation members and roles
  • Edit: Full editing rights for organisation details and settings
  • Export data: Export organisation-wide data and reports
  • Mail: Send emails to organisation members or attendees
  • Feed: View organisation activity feed and updates
  • Organisation admin files: Access organisation-specific admin files in Dropbox

Tour Permissions:

  • Summary: View tour summary and statistics
  • Events: View and manage events in the tour
  • Edit: Edit tour details, events, and settings

Requesting Additional Permissions

If you need access to features you don't currently have:

  1. Check "My Permissions" screen to identify the specific permission
  2. Contact your organisation administrator
  3. Explain which feature you need and why
  4. Administrator grants permissions through the web dashboard

Timing: Permissions typically apply immediately. No need to sign out and back in.

Why contact an administrator? Only organisation administrators can modify user role permissions through the web dashboard. This separation ensures proper oversight of who can access sensitive features.

Permission Changes

When your permissions change:

Change TypeWhat Happens
Permissions addedNew features immediately become available
Permissions removedFeatures become hidden or show "Access denied" message
NotificationsApp doesn't notify you of changes. You'll discover when using features

Differences Between Permission Types

AspectDevice PermissionsUser Role Permissions
ExamplesCamera, notifications, calendarEvent management, scanning, reporting, order access
Granted byYour phone's operating systemOrganisation administrators
Managed inDevice SettingsSeaty web dashboard
Applies toAll users of the app on this deviceYour user account across all devices
PurposeHardware and system feature accessBusiness and administrative feature access

Why this matters: If you can't access a feature, check if it's a device permission issue (fix in Settings) or a user role issue (contact your organisation admin).

Common Questions

Device Permissions

Can I use the app without granting camera permission? Yes, but you cannot scan tickets. All other features work normally. If you need to validate tickets without camera access, use manual ticket ID entry or another device.

Why do notifications require permission on iOS but seem automatic on Android? iOS requires explicit notification permission for all apps. Android allows notifications by default but users can disable them later in settings.

What happens if I deny calendar permission? The "Add to calendar" feature won't work. You can still manually create calendar entries outside the app using event details from your tickets.

User Role Permissions

Can I request specific permissions myself? No. Only organisation administrators can grant permissions through the web dashboard. Contact your administrator with the specific permission you need and why.

Do my permissions transfer between organisations? No. Permissions are organisation-specific. If you work with multiple organisations, each administrator manages your permissions separately.

Why can't I see certain events even though I'm staff? Staff permissions are often event-specific. Your administrator may have granted you access to some events but not others. Check "My Permissions" on the specific event you're trying to access.

Troubleshooting

I'm getting "Camera Permission Denied" - how do I fix it? Go to device Settings, find Seaty, then Permissions, and enable Camera. Return to the app and try scanning again.

I see "You don't have permission to access this feature" - what should I do? This is a user role permission issue (not device permission). Contact your organisation administrator to request the specific permission you need.

Notifications aren't working - what should I check? Check both: device notification permission (Settings, then Notifications, then Seaty) and in-app notification preferences. Both must be enabled for notifications to work.

Features don't appear even after my admin granted permission - why? Permission changes sometimes take a moment to sync. Pull down on the screen to refresh, or sign out and back in. Contact support if the problem persists.

Privacy & Security

Device Permission Privacy

PermissionWhat We AccessWhat We Don't Access
CameraQR code scanning onlyNo photos or videos stored
NotificationsSend event updates and messagesCan be disabled anytime
CalendarWrite event dates when you explicitly add themNo reading of your existing calendar

User Permission Security

Minimum necessary access: You only see data relevant to your role. Financial data requires explicit permissions.

Audit trails: Organisation administrators can see who has which permissions and when they were granted or revoked.

Instant revocation: Permissions can be removed immediately if needed.

PCI compliance: Payment card data is never shown in the mobile app. This protects your customers' sensitive payment information.

Mobile vs Web

User role permissions work consistently across platforms:

  • Same permissions apply to both mobile app and web dashboard
  • Permission changes sync instantly across all devices
  • Administrative permission management happens in web dashboard only
  • Viewing your permissions is possible on both platforms

Device permissions are mobile-specific: Camera, notifications, and calendar permissions only apply to the mobile app because they relate to hardware features.


Need help? Contact support@seaty.co.uk