Permission List

ProxPanel ships with 220 default permissions organised into 39 categories. Each permission gates one specific action (subscribers.create) or scope (subscribers.view_all). Permissions are stored in the permissions table and assigned to users via permission_groups and the permission_group_permissions join table.

This page lists the main permission categories, what they gate, and which user types typically receive them. Use it when designing a custom Permission Group, debugging an unexpected “Access Denied”, or auditing a reseller’s privileges.

Note

The authoritative, always-current catalog is the permissions table, seeded from the INSERT INTO permissions ... statements in schema.sql. The tables below cover the primary categories; new feature areas add their own permissions there.

How permissions are evaluated

The backend middleware (internal/middleware/auth.go) treats permissions as follows:

Caller	Behaviour
Admin user	Bypass — every permission granted automatically.
Reseller with NO permission_group	Bypass — full access (backward-compatible default).
Reseller WITH a permission_group	Only the permissions in the group are granted.
Support / Collector / Read-only	Same as reseller-with-group.
Customer (subscriber) login	None of these permissions apply — customers use a separate, simpler scope.

When a user lacks a permission, the backend returns HTTP 403 and the frontend’s <PermissionRoute> component renders an “Access Denied” page or hides the corresponding UI element.

Note

Permissions refresh on every page load via /api/auth/me. Granting a new permission does NOT require the user to log out — they need only refresh (F5).

Naming convention

Permissions follow category.action (e.g. subscribers.delete). Recurring suffixes:

Suffix	Meaning
.view	Read own scope only.
.view_all	Read system-wide / across all resellers.
.create	Add a new row.
.edit	Modify own scope.
.edit_all	Modify any row regardless of owner.
.delete	Remove own scope.
.delete_all	Remove any row.

User-type abbreviations used in the tables below: A = admin, R = reseller, S = support, C = collector, RO = read-only / partner.

dashboard (4)

The dashboard itself is always visible; these permissions toggle the widgets shown on it and unlock the admin-only blocks.

Permission	Description	Typical user types
dashboard.view	View dashboard	A, R, S, C, RO
dashboard.view_admin	View admin dashboard widgets (Top Resellers, System Metrics, administrative terminationes)	A
dashboard.view_active_only	Filter the dashboard subscriber counts to active only	A, R
dashboard.stats	View dashboard statistics endpoint (/dashboard/stats)	A, R

subscribers (61)

The largest category — subscribers are the central object in ProxPanel.

Read / list

Permission	Description	Typical	Gates
subscribers.view	View subscribers (own scope)	A, R, S, C, RO	Subscribers page, subscriber detail
subscribers.view_all	View all subscribers system-wide	A, RO (partner)	Bypasses reseller filter
subscribers.view_password	View PPPoE password (GET endpoint + edit form)	A, S	Password field in edit modal
subscribers.view_fup	View FUP level in subscriber list	A, R, S	FUP column
subscribers.view_graph	View live bandwidth graph for own subscribers	A, R, S	Live graph icon
subscribers.view_graph_all	View live bandwidth graph for any subscriber	A	—
subscribers.view_logs	View per-subscriber logs (own scope)	A, R, S	Logs tab
subscribers.view_logs_all	View per-subscriber logs (all)	A	—
subscribers.view_archived	View soft-deleted subscribers	A	Archived tab

Create / edit

Permission	Description	Typical	Gates
subscribers.create	Create subscribers	A, R	”Add Subscriber” button
subscribers.edit	Edit subscribers (own scope)	A, R, S	Edit form save
subscribers.edit_all	Edit any subscriber regardless of owner	A	—
subscribers.rename	Rename subscriber username	A, R	Rename action
subscribers.rename_all	Rename any subscriber	A	—
subscribers.change_owner	Reassign subscriber to a different reseller	A, R	Change Owner dialog
subscribers.change_owner_all	Reassign any subscriber	A	—
subscribers.change_service	Change subscriber’s service plan	A, R	Change Service dialog
subscribers.change_service_free	Change service without charging	A	—
subscribers.change_expiry	Edit expiry date directly	A	—
subscribers.change_service_money	Charge money for service change	A, R	—
subscribers.change_service_money_all	Charge money for any service change	A	—
subscribers.change_bulk	Bulk-change operations	A	Change Bulk page

Lifecycle actions

Permission	Description	Typical	Gates
subscribers.renew	Renew subscriber expiry	A, R, S	Renew button
subscribers.renew_all	Renew any subscriber	A	—
subscribers.add_days	Add days to expiry	A, R, S	Add Days dialog
subscribers.add_days_all	Add days to any subscriber	A	—
subscribers.add_days_overdue	Add days when subscriber is past due	A	—
subscribers.add_days_overdue_all	Same, system-wide	A	—
subscribers.inactivate	Activate / deactivate subscribers	A, R, S	Inactivate toggle
subscribers.inactivate_all	Activate / deactivate any	A	—
subscribers.disconnect	Disconnect active session (CoA)	A, R, S	Disconnect button
subscribers.disconnect_all	Disconnect any session	A	—

Delete

Permission	Description	Typical	Gates
subscribers.delete	Delete subscribers (own)	A, R	Delete button
subscribers.delete_all	Delete any subscriber	A	—
subscribers.delete_expired	Delete only expired ones	A, R	”Delete Expired” bulk option
subscribers.delete_all_expired	Delete any expired subscriber	A	—
subscribers.restore	Restore archived subscribers	A	Archived → Restore
subscribers.allow_refund	Permit refund on deletion	A	Delete dialog
subscribers.refund_no_money	Stop connection without refund	A	—
subscribers.refund_no_money_all	Same, system-wide	A	—

Quota / FUP / MAC

Permission	Description	Typical	Gates
subscribers.reset_fup	Reset FUP daily counters	A, R, S	Reset FUP button
subscribers.reset_fup_all	Reset FUP for any subscriber	A	—
subscribers.refill_quota	Refill monthly quota	A, R	—
subscribers.refill_quota_all	Refill quota for any	A	—
subscribers.reset_mac	Reset MAC binding	A, R, S	Reset MAC button
subscribers.reset_mac_all	Reset MAC for any	A	—
subscribers.unbind_mac	Permanently unbind MAC	A	—
subscribers.queue_quota	Use queue-based quota counters	A	—

Tools

Permission	Description	Typical	Gates
subscribers.ping	Ping a subscriber	A, R, S	Ping icon
subscribers.ping_all	Ping any subscriber	A	—
subscribers.torch	View live torch traffic	A	Torch icon
subscribers.port_check	Check subscriber’s port (WAN test)	A	—
subscribers.wan_check	Skip / recheck WAN management	A	—
subscribers.bandwidth_rules	Manage subscriber-level bandwidth rules	A, R	Bandwidth Rules section in edit

Bulk / import / export

Permission	Description	Typical	Gates
subscribers.bulk_import	Bulk import from CSV	A, R	Bulk Import page
subscribers.bulk_add	Admin bulk add	A	—
subscribers.bulk_update	Bulk update fields	A	—
subscribers.bulk_action	Run bulk actions (renew / disconnect / etc.)	A, R	Bulk Action menu
subscribers.export	Export own subscribers	A, R	Export button
subscribers.export_all	Export all subscribers	A, RO	—
subscribers.autorecharge	Configure auto-recharge per user	A, R	Auto-recharge toggle

services (4)

Permission	Description	Typical	Gates
services.view	View / list services	A, R, S, C, RO	Services page
services.create	Create services	A	Add Service button
services.edit	Edit services	A	Service edit form
services.delete	Delete services	A	Service delete button

Resellers see Services in read-only mode by default. Per-reseller pricing is configured via reseller_services (separate row per reseller × service).

nas (6)

Permission	Description	Typical	Gates
nas.view	View / list NAS devices	A, R (read-only)	NAS page
nas.create	Create NAS devices	A	Add NAS button
nas.edit	Edit NAS devices	A	NAS edit form
nas.delete	Delete NAS devices	A	NAS delete
nas.sync	Sync NAS state (pools, queues, online users)	A	Sync icon
nas.test	Test NAS connection (API + RADIUS)	A	Test button

sessions (4)

Permission	Description	Typical	Gates
sessions.view	View own subscribers’ sessions	A, R, S	Sessions page
sessions.view_all	View all sessions system-wide	A, RO	Bypasses reseller filter
sessions.disconnect	Disconnect a session	A, R, S	Disconnect action
sessions.view_history	View session history (radacct)	A, R, S	History tab

resellers (21)

The reseller category includes both “manage other resellers” (admin perspective) and “manage sub-resellers” (reseller perspective).

Permission	Description	Typical	Gates
resellers.view	View own / sub-resellers	A, R	Resellers page
resellers.view_all	View all resellers system-wide	A	—
resellers.create	Create resellers / sub-resellers	A, R	Add Reseller
resellers.edit	Edit resellers in scope	A, R	Edit form
resellers.edit_all	Edit any reseller	A	—
resellers.delete	Delete own / sub-resellers	A, R	Delete button
resellers.change_owner	Reassign reseller parent	A, R	Change Parent dialog
resellers.change_owner_all	Reassign any reseller	A	—
resellers.add_money	Top up reseller balance	A, R	Add Money
resellers.add_money_all	Top up any reseller	A	—
resellers.withdraw	Withdraw from reseller balance	A, R	Withdraw
resellers.withdraw_all	Withdraw from any reseller	A	—
resellers.view_subresellers	See the sub-resellers tree	A, R	Tree view
resellers.view_balance	View reseller balance	A, R, C	Balance column
resellers.set_credit	Set reseller credit limit	A	Credit dialog
resellers.add_support	Add / edit / list support users	A, R	Users → Support
resellers.add_collector	Add / edit / list collector users	A, R	Users → Collectors
resellers.notification	Send notifications via user portal	A, R	Push Notification button
resellers.recharge_code	Recharge via voucher code API (own)	A, R	API endpoint
resellers.recharge_code_all	Recharge any subscriber via voucher	A	—
resellers.billing_add	Billing-side reseller add	A	—

invoices (7)

Permission	Description	Typical	Gates
invoices.view	View invoices	A, R, C	Invoices page
invoices.create	Create invoices	A, R	Add Invoice
invoices.edit	Edit invoices	A, R	Invoice edit
invoices.delete	Delete invoices	A	Delete button
invoices.print	Print invoices (PDF)	A, R, C	Print button
invoices.email	Email invoices to subscriber	A, R	Email button
invoices.mark_paid	Mark invoice as paid manually	A, R, C	Mark Paid

prepaid (10)

Permission	Description	Typical	Gates
prepaid.view	View / list prepaid cards	A, R	Prepaid Cards page
prepaid.create	Generate prepaid cards	A, R	Generate button
prepaid.edit	Use / edit prepaid cards	A, R	Card edit
prepaid.generate	Generate cards for own subscribers	A, R	Per-subscriber generate
prepaid.generate_all	Generate for any subscriber	A	—
prepaid.delete	Delete prepaid cards	A, R	Delete
prepaid.disable	Disable cards without deleting	A, R	Disable toggle
prepaid.print	Print prepaid cards	A, R	Print
prepaid.export	Export prepaid cards (CSV)	A, R	Export
prepaid.hide_code	Hide card codes from operator view	A	—

reports (8)

Permission	Description	Typical	Gates
reports.view	View reports landing page	A, R, RO	Reports page
reports.generate_all	Generate every kind of report	A	—
reports.subscribers	Subscriber reports	A, R	Subscribers report
reports.revenue	Revenue reports	A, R	Revenue report
reports.services	Per-service reports	A, R	Services report
reports.usage	Usage reports	A, R	Usage report
reports.resellers	Per-reseller reports	A	Resellers report
reports.export	Export any report	A, R	Export button

transactions (4)

Permission	Description	Typical	Gates
transactions.view	View own transactions	A, R, C	Transactions page
transactions.view_all	View all transactions	A, RO	Bypasses reseller filter
transactions.create	Create transactions manually	A	—
transactions.delete	Delete transactions	A	Delete

tickets (7)

Permission	Description	Typical	Gates
tickets.view	View tickets	A, R, S	Tickets page
tickets.create	Create tickets	A, R, S	New Ticket
tickets.edit	Edit tickets	A, R, S	Edit
tickets.delete	Delete tickets	A	Delete
tickets.reply	Reply to tickets	A, R, S	Reply box
tickets.assign	Assign tickets to operators	A	Assign dropdown
tickets.close	Close tickets	A, R, S	Close button

backups (6)

Permission	Description	Typical	Gates
backups.view	View backups list	A	Backups page
backups.create	Create a backup	A	”Backup Now”
backups.edit	Edit backup schedules	A	Schedule edit
backups.restore	Restore from a backup	A	Restore button
backups.delete	Delete backups	A	Delete
backups.download	Download backup file	A	Download

settings (3)

Permission	Description	Typical	Gates
settings.view	View settings	A	Settings page
settings.edit	Edit settings	A	Save button
settings.wan_check	Manage WAN management check settings	A	WAN Check tab

audit / logs (2)

Permission	Description	Typical	Gates
audit.view	View audit logs	A, RO	Audit Logs page
logs.view	View system logs (errors, RADIUS)	A	Logs page

users (4)

The “users” table holds admin / reseller / support / collector accounts, distinct from subscribers.

Permission	Description	Typical	Gates
users.view	View / list users	A	Users page
users.create	Create users	A	Add User
users.edit	Edit users	A	Edit
users.delete	Delete users	A	Delete

communication (4)

Permission	Description	Typical	Gates
communication.view	View communication rules	A	Communication Rules page
communication.create	Create rules	A	Add Rule
communication.edit	Edit rules	A	Edit
communication.delete	Delete rules	A	Delete

bandwidth (4)

Permission	Description	Typical	Gates
bandwidth.view	View bandwidth rules	A	Bandwidth Rules page
bandwidth.create	Create rules	A	Add Rule
bandwidth.edit	Edit rules	A	Edit
bandwidth.delete	Delete rules	A	Delete

fup (2)

Permission	Description	Typical	Gates
fup.view	View FUP counters	A, R	FUP Counters page
fup.reset	Reset FUP counters	A, R	Reset button

sharing (3)

Permission	Description	Typical	Gates
sharing.view	View sharing detection results	A	Sharing Detection page
sharing.scan	Run a manual scan	A	Scan Now button
sharing.settings	Edit sharing detection settings	A	Settings tab

cdn (4)

Permission	Description	Typical	Gates
cdn.view	View CDN entries	A	CDN page
cdn.create	Create CDN entries	A	Add CDN
cdn.edit	Edit CDN entries	A	Edit
cdn.delete	Delete CDN entries	A	Delete

permissions (4)

Permission	Description	Typical	Gates
permissions.view	View permission groups	A	Permission Groups page
permissions.create	Create permission groups	A	Add Group
permissions.edit	Edit permission groups	A	Edit
permissions.delete	Delete permission groups	A	Delete

customers (1)

Permission	Description	Typical	Gates
customers.self_change_plan	Allow reseller to enable customer self-service plan change	A, R	Customer Portal toggle

Common preset groups

ProxPanel doesn’t ship preset groups out of the box — admins create them per deployment. The pattern recurring across customers:

Sales (creates subscribers, can’t delete or settings)

subscribers.view, subscribers.create, subscribers.edit, subscribers.renew,
subscribers.add_days, subscribers.change_service, subscribers.reset_mac,
subscribers.reset_fup, subscribers.disconnect, subscribers.ping,
services.view, sessions.view, sessions.view_history,
invoices.view, invoices.create, invoices.print, invoices.mark_paid,
prepaid.view, prepaid.generate,
transactions.view, tickets.view, tickets.reply

Support (read + troubleshoot, can’t bill)

subscribers.view, subscribers.view_password, subscribers.view_graph,
subscribers.view_logs, subscribers.edit, subscribers.reset_mac,
subscribers.reset_fup, subscribers.disconnect, subscribers.ping,
subscribers.bandwidth_rules,
services.view, sessions.view, sessions.disconnect, sessions.view_history,
tickets.view, tickets.create, tickets.reply, tickets.close,
audit.view

Collector (cash in, nothing else)

subscribers.view, subscribers.ping,
invoices.view, invoices.print, invoices.email, invoices.mark_paid,
transactions.view,
resellers.view_balance

Read-only partner / accountant

*.view, *.view_all, reports.*, audit.view

Schema reference

CREATE TABLE permissions (
    id SERIAL PRIMARY KEY,
    name VARCHAR(100) NOT NULL UNIQUE,
    description VARCHAR(255),
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);

CREATE TABLE permission_groups (
    id SERIAL PRIMARY KEY,
    name VARCHAR(100) NOT NULL UNIQUE,
    description VARCHAR(255),
    created_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
    updated_at TIMESTAMP DEFAULT CURRENT_TIMESTAMP
);

CREATE TABLE permission_group_permissions (
    permission_group_id INTEGER REFERENCES permission_groups(id) ON DELETE CASCADE,
    permission_id INTEGER REFERENCES permissions(id) ON DELETE CASCADE,
    PRIMARY KEY (permission_group_id, permission_id)
);

Permissions are seeded at install time from INSERT ... ON CONFLICT (name) DO NOTHING statements in schema.sql. Adding a new permission requires the INSERT line plus a backend handler that calls RequirePermission("category.action").

Related pages

• Users — assign users to permission groups.
• Permission Groups — create / edit groups via the UI.
• Resellers — per-reseller permission assignment.
• Audit Logs — see who exercised which permission and when.