Access
Everyone joins with the role that fits them, once the school says yes
Access approved by the school, roles with concrete permissions and guardian consent for minors.
In short
Access request
The person signs up and sets their own password; the administrator accepts or rejects the request.
Roles with a scope
A teacher sees their courses; a guardian, their dependants. The scope travels with the role, not with the screen.
Guardian authorisation
A minor’s account needs their consent, and they can withdraw it whenever they want.
In detail
Signing up is not getting in
Anyone can create an account, and creating one does not put them inside any school. It is the design decision everything else rests on: people open their own identity, but the school grants the access, and without that yes the account cannot even sign in.
Administrators cannot impersonate
They can accept requests, deactivate and change roles. They cannot read or set anyone’s password, nor use the platform on someone else’s behalf.
Family links established by the school
The link between a guardian and a student is set by the school, not by the guardian. A link you could declare yourself would be a link you could invent.
Lockout after several attempts
Five failed attempts in a row from the same connection block access for fifteen minutes. The account is not disabled: whoever comes along later from home gets in without noticing.