Access follows membership and assignments
Organization memberships and database row-level security policies separate program records. Staff roles control administrative actions; reviewer access also follows scholarship assignments, individual overrides, and recorded conflicts. Students access their own applications.