Accounts and invites

The admin, inviting people, sharing books, open sign-up, forgotten passwords and locked-out admins.

Inviting people

New accounts need an invite. As the admin, open Server admin, then Create invite (optionally with who it’s for, valid for 1, 7 or 30 days). Send the link, or let them scan the QR code: they pick a username and a password, and they’re in. Each invite works once. You can revoke an unused one in the same list.

There is no email anywhere: people sign in with their username.

Anyone can share their own books with other people on the same server. In the book, open Book settings, then Members: type their username, pick a role, and Invite. They see the invite the next time they open the app and choose Accept or Decline; until they accept, they see nothing of the book.

Owner: everything, including members, the book’s settings and deleting it.
Editor: adds and changes accounts, transactions, categories, people and budgets.
Viewer: can only look.

Anyone can leave a book from the same screen. A book always keeps at least one owner: make someone else owner before you leave. How it works: Users and shared books.

On Server admin, New accounts: “Anyone who can open this server”. Only do this if the server isn’t reachable by strangers (for example, it’s only on your Tailscale network).

Forgotten passwords

Make them a Reset link on Server admin, Accounts, and give it to them yourself. It works once, for 24 hours; it sets a new password, turns two-step verification off (in case they lost their phone too) and signs them out everywhere.

Disabling an account

Disable on the same list signs them out at once and stops them signing in. Their data and shared books stay; Enable gives everything back.

When the web app can’t help

Commands for whoever runs the server, in the msaving folder:

docker compose exec msaving python -m app.admin reset-password <username>   # a one-time reset link, admin included
docker compose exec msaving python -m app.admin make-admin <username>       # a new admin

Two-step verification

Each person can turn it on in Profile and security with any authenticator app. They get ten recovery codes, each usable once instead of the app’s code. How sign-in works in detail: Sign-in and accounts.