What you may do follows from two separate server-side facts: your working role and the business areas assigned to your account. Owner status is shown separately and is not another working role. The browser does not choose any of them. Every guard is enforced by the service, not by which buttons are showing: no session is refused with a 401, and an unavailable capability with a 403.

Sign-in uses your control-plane account and nothing else. The fallback to Directus was removed on 14 August 2026, because there is no Directus — the application was retired and the address it used now answers 404. While the fallback was there, any address without a control-plane account was told its password was wrong, which was never true.

Anything that changes the record is previewed first. You see exactly which rows would change, and nothing is written until you confirm.