Pomavo uses a granular permission system based on Subject-Action-Resource tuples, called SAR tuples. Each permission grant specifies the subject, action, and resource scope: who can do what on which resource. This lets you control access at the organization, project, template, or individual resource level.
Grant, scope, and revoke permissions from the management UI.
Configure which permissions are automatically granted to new members when they join the organization. This is managed from the Organization Settings page and ensures new team members have appropriate access from day one.
Pomavo supports anonymous access for public-facing projects. Permissions can be granted to a special anonymous user identity, allowing unauthenticated visitors to view tickets, comments, and other resources without logging in.
Anonymous access is controlled by the same permission system, grant VIEW_ISSUE, LIST_COMMENT, or other read permissions to the anonymous user for specific projects to make them publicly viewable.
When anonymous access is enabled for an organization, unauthenticated visitors can access org-scoped pages via direct URL. The backend validates all access through the permission system, returning 403 for any unauthorized actions.
