Every account on the platform, whatever roles it holds. This is the only page that can see them: auth.users is not reachable from a browser, so nothing else on this site can answer “who has an account here”.

Grant a role

The account must already exist — ask them to sign in once first. A role granted here takes effect on their next request; nothing needs restarting and no email is sent.

Renaming, re-colouring and removing leagues, which until now could only be created. Changing a slug changes the league’s public address and breaks saved links — it is allowed because leagues genuinely get renamed, not because it is safe.

New league

Every club on the platform, including any left without a league. A club is a real organisation: deleting a league does not delete its clubs, it orphans them, and they are moved back into a competition from here.

Photographs awaiting approval

Across every league. An under-18 photograph cannot be approved without recorded guardian consent — the database refuses it, so this queue cannot be used to get around the check.

Messages

API keys

Every key issued for the read-only JSON API, in every league. The key itself was shown once at issue and is not stored — only its hash, so a key cannot be recovered from here, only revoked.

Written by every privileged action on the platform since the first migration, and until now readable from nowhere. Kept two years.

Site-wide switches. The ones marked public are read by the front end without anybody being signed in — a maintenance banner nobody can see is not a maintenance banner.

Rebuild derived data

Standings, awards and every season figure are derived from the event log rather than stored independently, so rebuilding them is always safe and always gives the same answer. This is the first thing to try when a table disagrees with a box score.

Prune the audit log

Entries older than the retention window are removed. The floor is 30 days.

What this console cannot do