Users and Administration

The first account

On a new server, the first person to open it sees Create the administrator account. That account becomes the administrator. (With single sign-on, the first person to sign in becomes the administrator.)

Managing people in the app

Administrators: click your avatar (top right) ▸ Manage users, or press Ctrl+K and type "users".

Action	How
Add someone	Add a user: username, optional name, and a password (8+ characters). With single sign-on, enter their email and leave the password empty instead (details).
Make someone an administrator	tick Admin
Stop someone signing in	Disable (signs them out everywhere; their designs are kept). Enable to undo.
Reset a password	Reset password (signs them out everywhere)
Remove someone	the bin icon. This deletes the account and all of their designs.

Whittle always keeps at least one active administrator: the last one can't be demoted, disabled or deleted.

Prefer letting people sign up themselves? Set WHITTLE_SIGNUP=true (Configuration).

Your own account

Avatar ▸ Account shows your name, username and role, lets you change your password (this signs out your other sessions) and Sign out.

Command line

Useful for scripts, or if you're locked out of the only administrator account. On a server installed with the Linux installer:

sudo whittle-server user list
sudo whittle-server user add ada --admin     # then type the password and press Enter
sudo whittle-server user passwd ada          # set a new password
sudo whittle-server user admin ada on        # grant administrator rights (off to remove)

With Docker, use docker exec -it whittle whittle-server user … instead.

The password is read from the first line you type (it is shown on screen), or from the WHITTLE_PASSWORD environment variable:

echo 'a long password' | sudo whittle-server user passwd ada

Installed before version 0.2.1? The sudo whittle-server shortcut comes with the newer installer. Re-run the installer, or use the full form: sudo -u whittle sh -c 'set -a; . /etc/whittle/whittle.env; /opt/whittle/whittle-server user list'

Locked out?

• Forgot the administrator password: sudo whittle-server user passwd <name>.
• The only administrator was disabled or demoted (for example by a script): sudo whittle-server user admin <name> on.
• Signed out after a few failed tries: after 10 wrong passwords for the same username from the same address within 15 minutes, sign-in is paused for that pair. Wait 15 minutes.