Roles
Hostwares uses role-based access control (RBAC) to manage what users can do:
| Role | Description | Access Level |
|---|---|---|
| Admin | Full platform access | All sites, all users, all settings |
| Customer | Standard user | Own sites and databases only |
Admin capabilities
- View and manage all users
- Access any site or database
- Promote/demote users
- Suspend accounts
- View platform-wide analytics
- Manage billing and plans
- Configure platform settings
Customer capabilities
- Create and manage their own sites
- Create and manage their own databases
- Use the AI assistant (with credits)
- Manage their own domains and SSL
- View their own deployment logs
- Purchase AI credits
- Submit support tickets
Inviting Members
Currently, new users self-register at /register. Admins can then manage their roles from the admin panel.
To add a new team member:
- Have them register at hostwares.com/register
- Go to Admin → Users
- Find the user and click their profile
- Change their role if needed
Suspending users
Admins can suspend accounts that violate terms:
- Go to Admin → Users → [User]
- Click Suspend Account
- Suspended users cannot log in or access their sites
- Their containers continue running (not auto-stopped)
Permission Matrix
| Action | Customer | Admin |
|---|---|---|
| Create sites | ✓ (own) | ✓ (all) |
| Deploy / restart | ✓ (own) | ✓ (all) |
| View logs | ✓ (own) | ✓ (all) |
| Manage domains | ✓ (own) | ✓ (all) |
| Set env variables | ✓ (own) | ✓ (all) |
| Delete sites | ✓ (own) | ✓ (all) |
| View other users | ✗ | ✓ |
| Change roles | ✗ | ✓ |
| Platform settings | ✗ | ✓ |
| View all analytics | ✗ | ✓ |
| Manage billing | ✗ | ✓ |
Admin Panel
The admin panel (/admin) provides a complete overview of the platform:
- Dashboard — Total users, sites, databases, recent activity
- Users — List, search, view details, change roles, suspend
- Deployments — All deployments across all users
- Containers — Live container status and management
- Servers — Infrastructure health and metrics
- Tickets — Support ticket queue
- Activity — Audit log of all actions
- Settings — Platform-wide configuration
Best Practices
- Least privilege — Only grant Admin role to those who need it
- Audit regularly — Review the activity log for unusual actions
- Suspend, don't delete — Suspending preserves data for investigation
- Use strong passwords — Enforce password requirements for all accounts
- Monitor admin actions — All admin actions are logged in the audit trail