Users and permissions
Account creation
By default, anyone can sign up. Instance admins can disable signups from /admin.
Roles
Instance-level
- Instance admin: full control over the entire instance. Can manage all users,
wikis, and instance settings. Created via ADMIN_USER env var on first boot.
Wiki-level
- Owner: created the wiki; can do everything including deleting the wiki.
- Admin: can manage members, edit CSS, delete pages.
- Editor: can edit pages.
- Banned: blocked from viewing or editing (on private or public wikis depending on settings).
- Member: on private wikis, members can view and edit.
Passwords
- PBKDF2-SHA256 with per-user salt, 120 000 iterations.
- Minimum 8 characters.
- Forgotten passwords can be reset by an instance admin from /admin,
or via CLI:
node scripts/change-password.js <username> <new-password>