The right access for the right officers.
Every officer position ships with a sensible default permission set out of the box. A chapter can then customize exactly which positions can view or edit each part of the platform — Treasurer to Finance, Risk Manager to Attendance and Social Monitors, Membership Educator to New Member Education and Academics, Alumni Chair to Alumni Relations, President and Vice President to full chapter-wide access.
A closer look at the permission matrix.
Illustrative example — chapters configure their own positions and matrix in Settings.
| Module | President / VP | Treasurer | Risk Manager | Membership Educator | Alumni Chair | Recruitment Chair |
|---|---|---|---|---|---|---|
| Finance | Edit | Edit | — | — | — | — |
| Attendance | Edit | View | Edit | View | — | — |
| Social Monitors | Edit | — | Edit | — | — | — |
| New Member Education | Edit | — | — | Edit | — | — |
| Academics | Edit | — | — | Edit | — | — |
| Alumni Relations | Edit | — | — | — | Edit | — |
| Recruitment CRM | Edit | — | — | — | — | Edit |
| Judicial Board | Edit | — | View | — | — | — |
Enforced at the data layer.
Permissions aren't just hidden buttons in the interface. Access is enforced through Firestore Security Rules across three independent layers: a coarse role (Admin / Exec / Viewer), a per-chapter, per-officer-position permission matrix, and a platform-wide Super Admin flag.
Chapter-isolated by design.
ATO Executive System is built multi-tenant: every chapter's data is isolated from every other chapter's. The web app talks directly to Google Firebase — Firestore for data, Firebase Authentication for accounts — with no separate API layer to stand up or keep running.
Verified, not assumed.
CI runs on every code push — a syntax-check pass plus a real test suite that exercises the permission and security rules directly, so the access-control boundary is actually verified.
Responsible Disclosure
If you discover a security issue in ATO Executive System, please report it to atoexecutivesystem@gmail.com. We appreciate reports made in good faith and will work to address confirmed issues promptly.
Built to protect chapter operations. Priced to make adoption practical.
View Pricing →