Permissions
Runa uses role-based access control (RBAC) within workspaces. Each workspace member has one of three roles:
| Role | Description |
|---|---|
| Owner | Full control over the workspace. Cannot be modified or removed by others. |
| Admin | Can manage projects, members, and settings. Cannot delete the workspace. |
| Member | Can create and manage their own tasks. Limited administrative access. |
Permission Matrix
The table below shows what each role can do for each resource type.
| Resource | Create | Update | Delete | Notes |
|---|---|---|---|---|
| Workspace | Any user | Admin+ | Owner only | Any authenticated user can create a workspace |
| Project | Admin+ | Admin+ | Admin+ | Subject to tier limits |
| Column | Admin+ | Admin+ | Admin+ | Subject to tier limits |
| Project Column | Admin+ | Admin+ | Admin+ | Default columns for new projects |
| Label | Admin+ | Admin+ | Admin+ | Subject to tier limits |
| Task | Member+ | Author or Admin+ | Author or Admin+ | Subject to tier limits |
| Task Label | Member+ | Author or Admin+ | Author or Admin+ | Labels on tasks |
| Assignee | Member+ | Member+ | Member+ | Subject to tier limits |
| Post (Comment) | Member+ | Author or Admin+ | Author or Admin+ | Comments on tasks |
| Emoji (Reaction) | Member+ | Owner or Admin+ | Owner or Admin+ | Reactions on comments |
| Invitation | Admin+ | Admin+ | Admin+ or Invitee | Invitee can delete their own invitation |
| Workspace User | Admin+ | Admin+ | Admin+ | Cannot modify/remove owners |
| User | - | Self only | Self only | Created via OAuth, not directly |
| User Preference | Self only | Self only | Self only | Personal settings |
Legend:
- Member+ = Member, Admin, or Owner
- Admin+ = Admin or Owner
- Author = The user who created the resource
- Owner = The user who owns the resource (e.g., emoji creator)
Tier Limits
Workspaces have usage limits based on their subscription tier:
| Resource | Free | Basic | Team |
|---|---|---|---|
| Projects | 2 | 10 | Unlimited |
| Tasks (workspace-wide) | 500 | 2,000 | Unlimited |
| Columns per project | 5 | 20 | Unlimited |
| Labels per project | 10 | 50 | Unlimited |
| Assignees per task | 1 | 3 | Unlimited |
| Members | 3 | 10 | Unlimited |
| Admins | 1 | 3 | Unlimited |