Permissions Model

Permissions Model

LittleBoatPoll uses an internal binary administrative model.

Administrative Access

A user can perform administrative operations if at least one condition is true:

• User is in internal creators list (criadores-internos.json).
• User has Discord administrator privileges.
• User is the server owner.

Administrative operations include:

• Create polls
• Manage drafts
• Manage monthly members
• Manage creators
• Close active polls

Monthly Member Weighting

Vote weight can be increased for monthly members when poll configuration enables it.

Detection sources:

• Manual list in mensalistas.json.
• Role binding by guild in role-bindings.json (Mensalistas role).

Weight rules:

• usarPesoMensalista=true and user is monthly member: weight 2.
• Otherwise: weight 1.

Security Notes

• Dashboard API requires Authorization header validation.
• Command execution endpoint validates bot presence in target guild.
• Commands still execute their own permission checks.