CENTRAL ACCESS CONTROL

权限管理Access Management

管理员与审核权限统一在这里维护。换届时不需要修改网站代码。

Manage administrators and reviewer permissions in one place. Leadership handover no longer requires a code change.

受限页面Restricted page

权限管理员登录Access manager sign in

请使用 BC Google 账户登录。只有被授予“权限管理员”的人员可以查看或修改名单。Sign in with your BC Google account. Only people with the Access Manager role may view or change this list.

如果浏览器中仍是旧邮箱密码会话，只需用 BC Google 重新登录一次；此后登录状态会在全站共享。If this browser still has a legacy email-and-password session, sign in with BC Google once; that session will then be shared across the site.

返回活动后台Back to event management
正在检查已登录账户…Checking your current sign-in…
当前权限管理员Current access manager
活动管理Events 招新管理Recruitment

首次启用One-time setup

建立统一权限中心Initialize centralized access

系统会把 Junru Lin 与 Chenhao Zhang 建为首批完整管理员。初始化后，所有权限只以本页名单为准，原有写死邮箱不会继续生效。Junru Lin and Chenhao Zhang will become the initial full administrators. After setup, this list becomes the only source of access.

人员与权限People and permissions

添加或修改管理员Add or update an administrator

输入成员的 BC 邮箱并选择部门，即可继承该部门的统一权限。“权限管理员”是最高权限，自动包含所有当前及未来后台权限；个人额外权限可单独添加。Enter a user's BC email and choose a department to inherit its shared permissions. Access Manager automatically includes every current and future back-office permission. Add individual extras only when needed.

职务仅为标签；真正权限来自下方部门统一配置与个人额外权限。改变职务不会授予权限。Position is a label. Access comes from the department’s shared configuration plus any direct individual extras; changing a title does not grant access.

为新成员选择部门后保存即可继承该部门权限。已有个人额外权限默认保留；点击下方按钮可在保存时清除，以免旧的更广权限继续生效。Assign a department and save to inherit its permissions. Existing direct extras are preserved by default. Use the button below to clear them when saving so broader legacy grants do not remain.

部门活动管理可管理本部门所有活动及报名，不能管理其他部门。“活动管理员”可管理所有部门。IR 默认仅有活动、招新和 Mentor–Mentee 只读审核；传媒部默认仅有照片管理。个人学业资料与课程记录始终仅本人可读，不包含在任何后台预设中。Department event managers can manage every event and roster in their department, not other departments. Global Event administrators cover all departments. IR defaults to read-only events, recruitment, and Mentor–Mentee review; Media defaults to photo management only. Personal academic profiles and course history remain owner-only and are not included in any back-office preset.

个人额外权限（不需要时留空）Direct individual extras (leave empty unless needed)

全部门统一配置Shared department permissions

管理部门权限Manage department permissions

更改一次即可应用于该部门所有启用成员，无需逐人重设。只允许最高权限管理员修改；职务名称不会自动改变这里的权限。禁用部门会停止继承，但不会移除成员的个人额外权限。One configuration applies to every enabled department member. Only access managers can change it. Position labels do not override this configuration. Disabling a department stops inherited grants but does not remove direct individual extras.

此部门所有成员共同继承的权限Permissions inherited by all members

唯一权限名单Single access list

当前管理员与审核人Current administrators and reviewers

尚未建立权限名单。No access records yet.

数据与隐私Data & privacy

账户删除申请Account deletion requests

这里只记录人工处理进度，不会从浏览器自动删除 Firebase Auth。活动报名通常可在活动结束后保留最多 90 天，招新资料可保留一个招新周期；法律、安全或争议所需记录可能更久。“已完成”仅表示管理员已完成规定流程；完成满 180 天后可清理这条最小化审计记录。

处理账户删除时，还须通过授权的后台工具删除该用户的学业资料和全部课程记录；删除账户主记录不会自动清除子记录。Account deletion also requires authorized server-side removal of the student's academic profile and all course-history records. Deleting the account record does not remove its subcollections.

This panel records a manual workflow only; it cannot delete Firebase Auth from the browser. Event registrations may normally be retained for up to 90 days after an event, recruitment applications for one recruitment cycle, and legal, security, or dispute records longer. “Completed” means the required administrator workflow was completed; its minimal audit record may be purged after 180 days.

暂无账户删除申请。No account deletion requests.

安全换届Safe handover

换届顺序Handover order

  1. 现任管理员先添加继任者，并授予“权限管理员”或需要的具体权限。A current manager first adds the successor and grants Access Manager or the required specific roles.
  2. 继任者登录本页，确认可以查看并修改权限。The successor signs in here and confirms access.
  3. 由另一位权限管理员停用离任者。系统禁止任何人撤销自己的权限管理员身份，避免全站锁死。Another access manager disables the outgoing person. Self-removal of Access Manager is blocked to prevent lockout.

“照片管理员”不会自动授予活动权限；最高“权限管理员”包含此权限。Google Drive 相册的编辑权限仍需同时在 Drive 文件夹中调整。Photo Manager does not grant event permissions; the highest Access Manager role includes photo management. Google Drive folder editing must still be handed over in Drive.