Roles and permissions
Student and staff pitches share one hub, but each pitch has an audience that controls who can see it. The leadership decision chooses an action; it is not a publication approval gate.
| Capability | Student | Staff | School leader | Trust leader |
|---|---|---|---|---|
| Create a pitch | Yes | Yes | Yes | Yes |
| Choose who can see a pitch (Staff only / Everyone) | No | Yes | Yes | Yes |
| See student pitches | Yes | Yes | Yes | Yes |
| See staff-only pitches | No | Yes | Yes | Yes |
| Upvote or add a critique | Visible pitches | Visible pitches | Visible pitches | Visible pitches |
| Step up into a Shape Up Crew | Visible pitches | Visible pitches | Visible pitches | Visible pitches |
| Decide a pitch (Quick Win / Shape Up / decline) | No | No | School (and campus they can open) | Trust-wide |
| See engagement analytics | No | No | Current school or campus | Trust-wide |
| Pitch to a campus or the whole trust | Campus they belong to | Campus they belong to | Campus they belong to | Whole trust if they are trust-central |
Audience is a real visibility gate
Staff and leaders choose an audience when they pitch:
- Staff only (the default): visible to staff and leaders. Students never see it, cannot upvote it, and get a not-found page if they follow a direct link. This lets staff raise sensitive things — a behaviour policy that is not working, a curriculum concern — without it landing in a student feed.
- Everyone: visible to students and staff, the same as a student pitch.
Students always pitch to Everyone; they cannot create a staff-only pitch. Leaders still see and decide staff-only pitches so the ritual is unchanged.
School, campus, and trust
The header picker sets where you are looking. It does not change who you are.
- School shows that school's school-only pitches, plus campus pitches for its campus, plus trust-wide pitches.
- Campus shows campus pitches, trust-wide pitches, and school-only pitches you are allowed to see on that campus. Students only see their own school's school-only pitches. Staff see every school on the campus they belong to.
- Whole trust is for trust-central staff and admins. They can browse every pitch they are allowed to see, and they can pitch to the whole trust.
A direct link to a pitch still works if you could open a context that includes it, even if the picker is currently on another school.
The Owner role can preview these roles for testing. The preview changes both visible navigation and server-side permissions.
Parent voice is deferred. No parent-authored pitches or parent demo account are included in the current phase.