People & roles
Who can read, who can write, and who decides — plus what to do about lockouts.
The four roles
Everyone in a workspace is an owner, admin, editor, or staff. Out of the box: staff read procedures and use answers, editors also write them, admins also manage people and settings, and the owner can do everything. There is exactly one owner.
The permission matrix
A role is just a name for a row of ticks. Admins can open Settings → Roles & permissions and change what each role may do, capability by capability — changes apply immediately, even to people already signed in. A few cells are locked so nobody can saw off the branch they're sitting on.
Inviting someone
From Settings → People, an admin creates an invite for an email address and picks the role. On stepberry.app the invitation is emailed, and the admin also gets a copy of the link to pass on if it doesn't arrive. It works once, expires after 14 days, and each address can have one live invite at a time.
If someone is locked out
On stepberry.app, use Forgotten your password? on the sign-in page — a reset link is emailed to the address on the account. An admin can also issue one from Settings → People. Either way the link is single-use and lives for an hour; using it signs the person straight in and signs out every other session they had.
Admins can never reset the owner's password — an admin who could would effectively be the owner. Owner recovery is done from the server by whoever operates the installation.