Publishers, Eligibility and Invitations

Every Person, the Same Five Cards

Click a name – in the user list, in the command palette, or in an assignment-history entry – and their detail page opens. It always shows the same five cards in the same order: the profile with display name, active status, and congregation roles; the permissions to read; the registered devices; the absences; and the assignments as a timeline with a range selector. Where you lack the permission for a card, an explicit restricted-view note sits there instead of an empty area. A missing permission and missing data are never confused.

Eligibility Is Not the Same as Permission

CongPlan keeps the two apart. Eligibility decides what a publisher may be assigned to, for example public witnessing or particular program parts. A permission decides what a user may view or manage, for example users, settings, tasks, or technical assignments. Public witnessing shows the difference well: eligibility lets a publisher see and sign up for matching shifts, while the edit permission lets an organiser maintain plans, locations, and shifts and sign other people up too, even publishers without app access.

See the Consequences, Then Save

When you take an eligibility away from someone, CongPlan checks every assignment from today onward before saving. If that person is still assigned in a meeting, a technical duty, a field service role, a shift, or an outgoing talk, a list of affected future assignments appears with the date, the item, and the eligibility in question. The existing assignments stay in place: you confirm only after noting what you have to reassign. If another planner changes something meanwhile, the list is checked again before the final save.

Invite, Second Device, Passkey

To let someone start, create the person, generate an invite or a setup link, and either share the link directly or let them scan the QR code. Both links are personal. A setup link gives an existing user access on another device and does not create a new account. The overview and the detail page also show when someone last signed in or that they never have, and how long an open invitation stays valid.

Normal edit permissions take effect immediately, even without a passkey. Full administrator rights become available only once the person has a passkey and confirms it in the current session. Sensitive master-data changes need that confirmation too: name, display name, gender, baptism details, email, phone. Active status, eligibility, field service group, and congregation roles do not.

Deactivate Rather Than Delete

If someone should no longer use CongPlan, deactivate them instead of deleting their planning history. A deactivated user cannot sign in but keeps their past assignments as context, no longer appears in any field service group, and no longer counts toward its member total. They sort to the bottom of the list. Reactivating restores all of it immediately.