What you may do follows from your role on the server — the browser does not choose it. Every guard is enforced by the service, not by which buttons are showing: no session is refused with a 401, the wrong role with a 403.

Sign-in uses your control-plane account and nothing else. The fallback to Directus was removed on 14 August 2026, because there is no Directus — the application was retired and the address it used now answers 404. While the fallback was there, any address without a control-plane account was told its password was wrong, which was never true.

Anything that changes the record is previewed first. You see exactly which rows would change, and nothing is written until you confirm.