Permissions

The server enforces these on every request; hiding a button is only a convenience. Team members draft campaigns and submit them for approval. Only an admin can approve and send.