Skip to content
Module 01 · User roles & access

Join the association.

Create an account, confirm the email address you used, and give the association the details it needs to verify you as an RIT graduate. All three steps are on this page, and each one reports its real state rather than a hopeful one.

Email + password · checkingGoogle · checkingLinkedIn · checkingOne-time code · checking
OTP verification

Confirm the email address you used

A one-time code is how the association makes sure a working mailbox sits behind every account before it sends verification correspondence or event reminders to it.

One-time codeChecking

A six-digit code is emailed to the address you give and is valid for ten minutes. Only a hash of it is stored on the server, so the code cannot be read back out of the database.

What is the code for?

Checking whether this deployment can send mail.

How the code behaves
10 min
Code validity
5
Attempts per code
60 s
Resend cooldown
What a confirmed code proves
That you can read mail sent to that address. Nothing more.
What it does not do
It does not sign you in. The better-auth server on this deployment has no OTP sign-in plugin configured, so a session still comes from your password or a social provider. Anything else on this page would be a lie about how you got in.
How it is stored
Only a SHA-256 hash of the code, salted with your address, ever reaches the database. Requesting a new code deletes the previous one, and a used code cannot be replayed.
Integrated alumni verification

Prove you studied here

This is the authenticity gate for the whole portal. Nobody can approve their own request — the review mutation is internal to the server and runs from the association's console, not from a browser.

Alumni verificationChecked by the office

The directory is only worth using if everyone in it genuinely studied at RIT. The association matches the batch, department and roll number below against college records before your profile becomes visible to other members. That is a manual check by a person in the office, not an instant one — expect a few working days.

Your college record

Submitting again from the same address updates your pending request instead of queueing a duplicate. An already-approved member cannot reset their own verified status this way.

Live statusNo request

Nothing to show yet

File the request on the left, or type the address you applied with above. The status updates here by itself the moment the office reviews it.

Role-based access

Alumni, Entrepreneurs, Admins, Guests

What you see after signing in depends on the role the server resolves for your email address. Anyone unknown is a guest, because defaulting to the least privileged role is the only safe default.

alumni

Alumni

Full directory, careers, mentorship, events and giving.

entrepreneur

Entrepreneurs

Everything alumni get, plus the RACE zone and venture profile.

admin

Admins

Member management, moderation, analytics and reports.

guest

Guests

Public pages only — stories, events and giving.

Your resolved role

Resolving…

Asking the server which role applies to this visitor.

source
Which role can reach which area of the RITAA portal
Area of the portalAlumniEntrepreneursAdminsGuests
Public pages — stories, events, givingAllowedAllowedAllowedAllowed
Alumni directory and contact detailsAllowedAllowedAllowedNot allowed
Career hub, resume upload, referralsAllowedAllowedAllowedNot allowed
Mentorship booking and feedbackAllowedAllowedAllowedNot allowed
RACE venture profile and idea submissionNot allowedAllowedAllowedNot allowed
Member management and content moderationNot allowedNot allowedAllowedNot allowed
Analytics dashboard and report exportsNot allowedNot allowedAllowedNot allowed

Where this stands today: roles resolve on the server, approval of a verification request is an internal-only mutation, and the directory already enforces per-field visibility server-side so a hidden phone number is never sent to the browser. Route-level gating — the part that keeps a guest out of the admin panel — is the model above and is not enforced in code yet. It must be in place before the portal opens publicly.

After you apply

What happens on the association's side

  1. 01

    The request reaches the office

    Your name, batch, department, roll number and graduation year are stored as a pending request the secretary can see.

  2. 02

    Records are checked by hand

    The details are matched against the institute's graduation records. A mismatch is queried by email, not rejected silently — approval is an internal-only mutation, so nothing about it can be self-served from a browser.

  3. 03

    Your role changes with it

    Approval grants the alumni role, flips your directory listing to verified, and opens the directory, career hub and mentorship network.

Questions · alumni@ritrjpm.ac.in · (04563) 233400