Accounts¶
Getting started¶
The first visit lands on a setup page. Whoever registers first becomes an administrator, and any comics already indexed (from a single-user install) become theirs.
After that the server is invite-only by default. An admin creates an invite
on the admin page and sends the resulting /register?invite=… link. The policy
can be changed to open (anyone may sign up) or closed (admins create every
account by hand).
Who can see what on the server¶
The server-side file browser is the one place accounts could otherwise leak into each other, so access is explicit:
| Account | Can browse |
|---|---|
Admin, with LONGBOX_BROWSE_ROOTS set |
those roots |
| Admin, with no roots configured | anywhere the process can read |
| Anyone with a library folder set on their account | that folder only |
| Everyone else | nothing — uploads only |
Admins set a library folder per account, so each person can be pointed at
/srv/comics/jamie and confined there. Path checks resolve symlinks and ..
before comparing, and the import endpoints re-check on submit rather than
trusting the browser.
What is per-account¶
Comics, covers, series, reading state, favourites, watched folders, import jobs, uploads, Comic Vine API key and preferences. An admin can see the number of comics an account holds, but not the comics themselves.