Employee Center Role, Permission, and Least-Privilege Policy

No Raw Database Data Claim

For clarity, this document does not claim that Quintin N. Mahan owns raw facts, raw database rows, independent outside source records, CRS-owned operational records, customer-owned records, third-party-owned records, or customer relationships merely because such information is entered into, stored in, processed by, displayed through, backed up with, or exported from EC.

This document protects EC Protected Materials: the application, software, source code, schemas, database design, data model, relationships, indexes, workflows, dashboards, reports, queries, automations, integrations, APIs, access controls, credentials, hardware, infrastructure, legal records, certificate records, hashes, metadata systems, audit systems, methods, processes, techniques, trade secrets, documentation, and EC-created structural organization.

Version: 1.0
Effective Date: June 1, 2026
Platform: Employee Center / EC
Owner: Quintin N. Mahan
Legal Hub: /legal
Policies Hub: /legal/policies

Policy URL: /legal/policies/role-permission-least-privilege-policy

1. Purpose

This policy explains how EC may limit access through roles, permissions, scopes, and least-privilege controls.

2. Least Privilege

Users should receive only the access needed for authorized EC-related purposes.

3. Permission Does Not Equal Ownership

Being able to view, edit, export, approve, or administer something in EC does not create ownership or control rights in EC.

4. Role Changes

Roles and permissions may be changed, reduced, revoked, expanded, or audited by Quintin N. Mahan.

5. No Bypass

Users may not bypass permissions, use another account, exploit bugs, manipulate URLs, use APIs, or use exports to access unauthorized records.

Changes to This Policy

Quintin N. Mahan may update this policy by publishing a new active version in EC.

The current active version will be displayed through the Legal hub.

Older versions may remain stored in Postgres for audit, evidence, and historical review.

Contact / Owner

Employee Center is owned by Quintin N. Mahan.

Legal and policy documents are available from:

/legal

The current Terms and Conditions are available from:

/legal/terms-and-conditions

End of Employee Center Role, Permission, and Least-Privilege Policy.