user roles

freqhole uses role-based access control to manage what users can do.

roles

roles in order from most to least privileged: root, admin, member, viewer.

the system owner. created automatically on first setup.

full control over the server.

standard user with editing rights.

read-only access.

action	root	admin	member	viewer
browse library	✓	✓	✓	✓
stream music + video	✓	✓	✓	✓
search	✓	✓	✓	✓
add favorites / ratings	✓	✓	✓	✓
edit song/album metadata	✓	✓	✓	✗
edit video/series metadata	✓	✓	✓	✗
delete songs/albums	✓	✓	✓	✗
delete videos	✓	✓	✓	✗
trigger scan	✓	✓	✓	✗
manage tags/genres	✓	✓	✓	✗
create users / invite codes	✓	✓	✗	✗
generate account-link codes	✓	✓	✓	✓
approve knock requests	✓	✓	✗	✗
server maintenance	✓	✓	✗	✗

the first user created on a new server is automatically root.

invite codes specify the role of the new user:

freqhole auth create-invite --role viewer
freqhole auth create-invite --role member
freqhole auth create-invite --role admin

default is viewer if not specified.

admins can change user roles: