Diff: Users

Back to page
Rev 2 by kapitalpirat (6d ago) ← Rev 1 by itadmin (6d ago)

Before

  1. Users and permissions

== Account creation

By default, anyone can sign up. Instance admins can disable signups from /admin.

== Roles

=== Instance-level - Instance admin: full control over the entire instance. Can manage all users, wikis, and instance settings. Created via ADMIN_USER env var on first boot.

=== Wiki-level - Owner: created the wiki; can do everything including deleting the wiki. - Admin: can manage members, edit CSS, delete pages. - Editor: can edit pages. - Banned: blocked from viewing or editing (on private or public wikis depending on settings). - Member: on private wikis, members can view and edit.

== Passwords - PBKDF2-SHA256 with per-user salt, 120 000 iterations. - Minimum 8 characters. - Forgotten passwords can be reset by an instance admin from /admin, or via CLI: `node scripts/change-password.js <username> <new-password>`.

After

Users and permissions

Account creation

By default, anyone can sign up. Instance admins can disable signups from /admin.

Roles

Instance-level

  • Instance admin: full control over the entire instance. Can manage all users,

wikis, and instance settings. Created via ADMIN_USER env var on first boot.

Wiki-level

  • Owner: created the wiki; can do everything including deleting the wiki.
  • Admin: can manage members, edit CSS, delete pages.
  • Editor: can edit pages.
  • Banned: blocked from viewing or editing (on private or public wikis depending on settings).
  • Member: on private wikis, members can view and edit.

Passwords

  • PBKDF2-SHA256 with per-user salt, 120 000 iterations.
  • Minimum 8 characters.
  • Forgotten passwords can be reset by an instance admin from /admin,

or via CLI:

node scripts/change-password.js &lt;username&gt; &lt;new-password&gt;