🌐 Qwiki Manual
Administration Guide / Access Control, Users & Security / Users, Roles & Account Verification

Users, Roles & Account Verification

Standalone Qwiki stores user accounts in users.json using native PHP Bcrypt (password_hash()) and supports two cleanly separated roles: Admin and Viewer.

Manage Users and Permissions modal showing user creation and existing accounts

Roles & Capabilities

Capability Viewer Admin
Read public & logged_in documents Yes Yes
Read admin_only, Draft, In Review & Archived docs No Yes
Comment & participate in enabled Talk Pages Yes Yes
Use personal Gemini BYOK key (if enabled) Yes Yes
Create, edit, delete, upload, or reorder chapters/categories No Yes
Access Settings, Users, Trash Bin, Activity Log & LLM Keys No Yes

Adding & Managing Users

Open admin ▾ ➔ 👥 Users:

  1. Under Add New User, enter Username, Password, optional Email, and select Role (Viewer (Read-only) or Admin (Full Access)).
  2. Click + Add User.
  3. Users can sign in using either their username or registered email address.

Email Verification & Offline Admin Password Resets

From the Existing Users table, administrators can:

  • Verify Email (1-Click): Mark a user's email address as verified directly from the Users modal without waiting for an external verification loop.
  • Generate Offline Reset Link: Create a time-limited (24-hour) password reset link to send securely over chat or phone when outbound email isn't configured.
  • Promote/Demote Roles or Remove Accounts: Update access immediately as team responsibilities change.