Progress: 0 / 20 entities secured
- Go to Base44 Dashboard → Entities
- Click on each entity from the list below
- Find "Security Rules" section
- For each READ rule: Click "Add Rule" under "Read Access Rules", select the rule type, fill in the values
- For each WRITE rule: Do the same under Create/Update/Delete tabs
- Click "Save Security Rules" at the bottom
- Check the box below when done
- Repeat for all 20 entities
Rule Types:
• No Restrictions = Everyone can access
• Creator Only = Only record creator (uses created_by)
• Entity-User Field Comparison = Match entity field (e.g., user_email) with user property (e.g., user.email)
• User Property Check = Check user property value (e.g., user.role equals admin)
Users can see/edit their own sessions only
Users can access records they created
user.role equals admin
Users can modify records they created
user.role equals admin
Users see their own subscriptions, only admin can modify
user_email equals user.email
user.role equals admin
user.role equals admin
Agents see their own commissions only
agent_email equals user.email
user.role equals admin
user.role equals admin
Partners see their own data, partner managers see all
user_email equals user.email
user.role equals admin
user.partner_manager equals true
user_email equals user.email
user.role equals admin
Partners see their own referrals
partner_email equals user.email
user.role equals admin
user.partner_manager equals true
user.role equals admin
Partners see their own payouts only
partner_email equals user.email
user.role equals admin
user.partner_manager equals true
user.role equals admin
Inviters and invitees can see their invitations
inviter_email equals user.email
student_email equals user.email
user.role equals admin
inviter_email equals user.email
user.role equals admin
Users see their own achievements
user_email equals user.email
user.role equals admin
user.role equals admin
Users see their own stats
user_email equals user.email
user.role equals admin
user.role equals admin
Referrers and referred users can see their referrals
referrer_email equals user.email
referred_email equals user.email
user.role equals admin
user.role equals admin
Universities manage their own questions
university_email equals user.email
user.role equals admin
university_email equals user.email
user.role equals admin
Agents manage their own templates
agent_email equals user.email
user.role equals admin
agent_email equals user.email
user.role equals admin
Marketing analytics - admin only
user.role equals admin
user.role equals admin
Analytics data - admin only
user.role equals admin
user.role equals admin
Payment analytics - admin only
user.role equals admin
user.role equals admin
Email campaign tracking - admin only
user.role equals admin
user.role equals admin
Anyone can submit, only admin can read
user.role equals admin
All users can create records
Partner management - admin/partner managers only
user.role equals admin
user.partner_manager equals true
user.role equals admin
user.partner_manager equals true
Public content, admin creates
All users can read
user.role equals admin
Public university directory
All users can read
user.role equals admin