Variable: ACCESS_DOMAINS

const ACCESS_DOMAINS: readonly ["overview", "business_dev", "recruiting", "onboarding", "team", "time", "payroll", "billing", "insights", "settings"]

Defined in: src/lib/permissions/index.ts:10

Page-access permissions (pure, no I/O) — ADR pending. Admins are owner (superadmin, full access) or staff; a staff member is assigned an ACCESS ROLE (e.g. finance, recruiter) whose grants are a set of ACCESS DOMAINS. Each /admin page/nav item belongs to one domain; a staff member sees and can open only the domains their role grants (every admin always gets overview; settings is owner-only). The role→domains map is configurable (stored in settings, seeded from the defaults below); the domain taxonomy and route mapping are fixed in code.