Accounts and roles

Signing in

Sign in at /login. The session is a JWT in an HttpOnly cookie.

Roles

Role	Can
viewer	Browse the library, keep a wishlist and collection, write notes, see activity and charts.
staff	The above, plus the shared operational views.
admin	Everything, plus the Administration section — source connections, enrichment, backfills, duplicates and user management.

Per-user versus shared

The library itself is shared: one canonical set of artists, albums and tracks for the whole instance.

What is yours is the state on top of it — favourites, wishlist, owned markers, notes, and your own scrobble history. Two users looking at the same album see the same album and different annotations.

That distinction matters for the activity feed: discoveries are scoped to you or to everyone, and the difference is a real one.