On the public address anyone can read everything, but actions that change the server (running sources, re-evaluating, editing the shared places) are reserved for the owner.
Data and trust
The public site shows the same live data as the owners' own copy. To keep it safe and fair to the data providers, visitors cannot:
run or verify sources on demand (that would hammer the providers),
force a re-evaluation of the Koh Samui level,
add or remove places on the shared Places list,
save the Preparedness checklist on the server.
Your Preparedness ticks and your personal Places list are kept in this browser instead (they stay after a reload, but not on another device). The owner can sign in with an admin token to get the buttons back.
How to read it
A note "reserved for the site owner" replaces each hidden button. Everything else works normally.