Back to Knowledge Base
Security & access control
Five roles from Client to Owner, organisation-level data isolation enforced by Row-Level Security, encrypted tokens, hashed API keys, and HMAC-validated webhooks.
SKUuz implements five roles with increasing privilege: Client (view-only), Operator (edit products, generate content), Manager (imports, exports, publishing), Admin (data model, settings, user management), and Owner (admin plus billing, plan, and org settings). Each role inherits all lower roles' permissions. Assignments are managed from the Users page in Settings.
Data security
- All data encrypted in transit (TLS 1.3) and at rest.
- Shopify and WooCommerce tokens stored encrypted.
- API keys hashed at rest — plaintext shown only once at creation.
- Each organisation's data is fully isolated; Row-Level Security policies enforce that users only access their organisation's data.
- Webhook payloads validated using HMAC signatures.