Access settings define what different audiences are allowed to do with a Zwyn Tag. They help keep owner actions protected while still allowing the tag to be useful for visitors and signed-in users.

Zwyn uses a permission matrix. Each audience can receive specific permissions, such as viewing the profile, creating entries, viewing entries, editing entries, or deleting entries.

Audiences

• Public visitors are people who open the tag through QR, NFC, or a public Zwyn Tag link without signing in.
• Signed-in users are logged-in Zwyn users who are not the tag owner.
• The owner is the account that claimed and manages the tag.

Permissions

• View profile controls whether an audience can open and view the public-facing tag profile.
• Create entry controls whether an audience can add new entries to the tag.
• View own entries controls whether an audience can view entries they created themselves.
• View all entries controls whether an audience can view every entry connected to the tag.
• Edit own entries controls whether an audience can update entries they created themselves.
• Edit all entries controls whether an audience can update any entry connected to the tag.
• Delete own entries controls whether an audience can delete entries they created themselves.
• Delete all entries controls whether an audience can delete any entry connected to the tag.

How access settings work together

Some permissions depend on others. Zwyn automatically keeps related settings consistent so that entry editing or deletion cannot become more open than the actions they depend on.

• If entry creation is limited to signed-in users, public visitors cannot be given broader edit or delete access.
• If only the owner can create entries, editing and deleting entries are also restricted to the owner.
• Deleting entries cannot be more open than editing them. For example, if users may edit only their own entries, they cannot be allowed to delete every entry.

Example setups

• Public profile, owner-managed entries: anyone can view the profile, while entry viewing, creation, editing, and deletion remain limited to the owner. This works well for lost-and-found or information tags.
• Signed-in profile: only signed-in users can view the profile, while the owner remains responsible for entries and management.
• Signed-in contributions: signed-in users can create entries and view, edit, or delete their own entries, while the owner retains access to everything.
• Public logbook: visitors can view and create entries without signing in. Use this only when contributions should genuinely be open to anyone with the tag link.
• Owner only: the profile, entries, and all entry actions remain restricted to the tag owner.