Users and roles

Only those approved by the administrator get into a PARIDE server. Nobody copies keys or files by hand: a new workstation or agent introduces itself, and the administrator approves it by comparing a code.

The three roles

Role	In the commands	Can
observer	`observer`	open and read files, see the others write, search
developer	`developer`	what the observer can, plus write, create, move, put in the trash, replace in files
administrator	`admin`	everything, plus workspaces, users and server settings

Whoever introduces themselves for the first time gets in as an observer, unless the administrator says otherwise: so an approval given by mistake only lets them read. A role change applies at once, without the person having to reconnect.

Approving a workstation

The person starts the client and connects (Getting started). Their screen shows “Waiting for approval” with a 6-digit code.
The administrator looks at who is waiting, from the client (Configuration → Server) or on the server:
```
sudo -u parideserver paride-server user list
```
Every line has name, kind (person or agent), role, status and code.
If the code is the one the person reads on their screen, approve it with the role needed:
```
sudo -u parideserver paride-server user approve roberto-pc 375368 developer
```
From the client: choose the user, type the code, choose the role and press Approve.

The client gets in by itself a few seconds later. If meanwhile another key has introduced itself with the same name, the old code no longer approves: that is why the codes are compared.

Changing role and removing

sudo -u parideserver paride-server user role roberto-pc admin
sudo -u parideserver paride-server user remove old-pc

The same can be done from the client's Server page, where removing asks for confirmation. A removed user can do nothing more from their next message.

Workspaces and settings

From the same Server page, or with the commands, the administrator:

adds and removes workspaces (paride-server workspace add NAME FOLDER, workspace remove NAME, workspace list); removing a workspace does not delete its files;
changes the server settings, one field per item with its explanation below (paride-server config list, config set KEY VALUE). Those that need no restart apply at once; for the others the page shows which value the server is using until it restarts.

The commands given from the client and those given on the server are the same, with the same checks and the same messages; the server's log records who gave them.