Running the platform
Account creation settings
Who can sign up, how new accounts are protected, and how platform staff roles are appointed.
Who can sign up
Anyone can create a FoodProt AI account with an e-mail address and a password. An institutional address is not required. Every new account is a Member: it can create private projects and be invited to others, and it sees no existing project until an owner invites it.
Google sign-in is offered on the sign-in page when the platform has it switched on.
How new accounts are protected
New accounts are protected in several ways.
- Confirmation e-mail: the address must be confirmed by e-mail before the account can be used. "Resend confirmation" is on the sign-in page.
- Rate limiting: repeated sign-up attempts are limited.
- Password reset: a forgotten password is reset through an e-mail link.
- Two-factor authentication: each person can switch it on in Account.
- Allow new users to sign up: this is on by default. A platform owner can have account creation switched off for the whole platform; invitations to projects keep working.
Appointing platform staff
Platform admins are appointed by a platform owner from Administration → Staff. Each appointment and each change is saved with a recorded reason.
A platform admin can carry out only the tasks they have been explicitly granted, such as seeing the account directory, suspending an account, retrying background tasks or seeing system status.
What an account can reach
Signing in gives no access to any existing project. Platform staff do not see inside a private project unless they are members of it. A suspended account can sign in but cannot open projects or change anything.
Related
Invitations and removing access
How people join a project: the invitation, its expiry, resending and revoking it, and suspending a member.
Project roles: owner, editor, reviewer, viewer
What an owner, an editor, a reviewer and a viewer can each do in a project, and how platform roles differ.
System status
Where to find System status, what it reports, and what to do when background work has stalled.
Privacy and security
What is stored, who can read it, what is sent outside the platform, and what the platform never holds.