How the programme works
Organisations and roles
Section titled “Organisations and roles”A partner organisation owns the listings you submit. People belong to it with one of five roles:
| Role | Read submissions | Write and submit | Manage members |
|---|---|---|---|
| Owner | yes | yes | yes |
| Admin | yes | yes | yes (not Owners) |
| Developer | yes | yes | no |
| Finance | yes | no | no |
| Support | yes | no | no |
Everything you do through the Partner API is checked against your user and the organisation in the path: a
token is never an organisation. Someone who is not a member of an organisation, and a member who may not do the
thing, get the same 403 forbidden.
Keys belong to the first organisation that uses them
Section titled “Keys belong to the first organisation that uses them”A listing key (acme-sync) is yours from the first submission. Another organisation that tries it is refused
with key_taken, so a name cannot be taken from you later. The keys CIQRA’s own apps use, and a few reserved
words (ciqra, admin, api, platform, official, partner, partners, market), are never available.
What is open today
Section titled “What is open today”| Free apps and vendor-billed apps | open |
| Third-party apps with scopes and webhooks | open for submission |
| Paid third-party apps billed by CIQRA | not open (owner decision pending) |
| Installation by merchants from the market | not open yet |
| Partner payouts | not open |