People and permissions

Permissions are given to roles, not to people. A module you install tomorrow brings its own permissions, and they appear on the same roles page.

Built-in roles (the higher, the more power):

You can rename roles and change their permissions on the roles page.

Role categories. The roles page has a “Role categories” link: it decides which categories a role can see (and a visitor who is not signed in). By default a role sees everything. For each section (news, forum, shop, downloads…) choose “Sees everything”, “Does not see the checked ones” or “Sees only the checked ones” and check the categories. The “For hidden categories hide only the full text” checkbox keeps entries in the feed with a short text and closes the page with the full text. If a person has several roles, a category is visible when at least one role opens it; the owner sees everything. A closed category does not appear in search, RSS or notifications, and you cannot delete a closed category that contains entries.

Hidden text. The markup bar (in the admin panel and on the site) has a “Hidden text” button: everything between hide and /hide in square brackets is visible only to those who have the “See hidden text in entries, comments and messages” permission. A guest and a role without the permission do not see this part on the page, in excerpts, emails, notifications, RSS or search. An unclosed hide in square brackets hides all the rest of the text.

Emoticons. In entries and comments, codes such as 🙂 turn into emoji (40 of them, no images, the font comes from the device). You can pick an emoticon in the markup bar with the emoticon list button; the code is inserted into the text for you.

Typographer and formulas (both settings are off by default).

• “Typographer in texts”: straight quotes become «guillemets» or „low-high“ quotes depending on the reader's language, “ - ” becomes a dash, “...” becomes an ellipsis, a non-breaking space is placed after short prepositions and conjunctions, and (c) (r) (tm) become the symbols ©, ® and ™. Code, links and addresses are not changed; the saved text stays as written, only the output is adjusted.
• “Formulas in texts”: write a TeX formula between [math] and [/math] inline, or [math=block]…[/math] on a separate line. It is rendered by the KaTeX library from your own site, no external addresses are used, and it is loaded only on pages with formulas. A formula longer than 500 characters stays as text.

View online in Downloads (off by default). The “View online” setting: a release whose main file is a PDF, DOCX or XLSX gets an “Open online” button. A PDF is shown by the browser's built-in viewer; DOCX and XLSX are output as text and a table built on the server (up to 3000 paragraphs or 200 rows per sheet), nothing in the file is executed, and formatting and images are not reproduced. Access is the same as for downloading; PDF and DOCX/XLSX count as a download for the role limit. Template output: the tags allow_online, online_view_url.

Device notifications, Web Push (off by default). The “Notifications to the device (Web Push)” setting: on the “Notifications” page everyone gets a “Turn on for this device” button, and new notifications appear on the screen even when the site is closed. Only the title and a link are sent, and the message is encrypted. The site signing key is created automatically; a real site key (app.key) is required. The delivery services receive the sender address from “Settings → Mail”. The subscription is removed on sign-out, blocking, deletion and a password change.

Modules: “Latest module errors” and “Download the module archive”. In a module's card, the “Latest module errors” link opens the error log entries from this module's files for the last few days; “Clear the list” only hides them here, the log is not erased. “Download the module archive” (the permission to manage modules, a fresh password, an entry in the log) packs the files of the module folder without settings, data, keys and logs; the limit is 30 MB.

Updating without file permissions. If the server cannot write to the engine folders, the “What changed” screen names those folders with the number of files, the “Update” button is disabled, and below it you get the steps: grant write permission, or update manually by uploading the archive over the files (do not touch config and storage). FTP passwords are never entered in the panel. After the upload the migrations are applied automatically.

AI assistant in the editor (off by default). The “Turn on the AI assistant” setting: those whose role has the “Use the AI assistant in the editor” permission get a “✦ AI” button in the markup bar. Commands: improve, fix mistakes, shorten, expand, simplify, make more formal or friendlier, continue, summary, list, article outline, title, search description, tags, translate into the chosen language. The text goes to the provider only after you press a command: the selected fragment or the whole text of the field, and before sending you see the note “Will be sent to the provider …: N characters”; the name, email and other fields are not sent. The reply is a suggestion: “Accept”, “Insert after” or “Reject”. Settings: “Provider” (Anthropic needs only a key; “OpenAI-compatible address” is for OpenAI, OpenRouter, Azure and your own servers), “API address” (https only, and a publicly reachable address), “Model”, “API key” (stored encrypted and not shown after saving; erased when the provider or address changes), “Requests per person per day” and “Requests for the whole site per day” (0 means no limit, and the costs at the provider are yours) and “Longest text per request” (from 200 to 20,000 characters). The text goes to a third-party service, so mention this in your site's privacy policy.

New version of a third-party module (off by default). A module can declare an https address with information about its version; once a day the site reads only the version number and a link to the author's page, downloads nothing, and the module list shows the note “Version … is out”. Modules shipped with the engine do not use this address.

Notifications: the “Actions” menu. The bulk-action buttons on the notifications page are gathered into one row with an “Actions” menu; pending deletions are also carried out when the page is minimized.

Notifications: deleting. You can remove a notification with the cross (an “Undo” button appears for a few seconds), check several and choose “Delete selected”, or press “Clear read”. If the section the notification belonged to has disappeared, the person sees a calm “This section is no longer available” page that offers to delete the notification; if there is no such notification or it is someone else's, the “No such notification” page. There is no error in either case. Notifications whose section has disappeared (for example, a module was disabled and removed) count as “orphans” and are removed by the site cleanup wizard.

News: the person's card and the comment counter. The public card of a person shows the number of their publications and their average rating. A row of an entry in the news feed shows a comment counter; it is counted with one query per page and does not slow the feed down.

News: the A–Z catalog, feed order and advanced search. The news feed has a “Catalog A–Z” link: all entries in alphabetical order, with letter links at the top and the number of entries for each. Besides “Newest first” and “Oldest first”, the feed order can be by edit date, by rating, by views, by number of comments and by title in both directions (pinned entries stay at the top). In the site search: “How to match words” (the phrase as written, all words in any order, any of the words, exact match of whole words), “Author”, “At least this many comments”, “Where in the text to search” (titles and summaries, or the full text), “Categories” (you can check several; applies to news), the sort direction, “Show titles only” and “Reset”.

Private messages: mailbox fullness. “Mailbox: N of M” is shown according to the role limit; at 80% and with a full mailbox hints appear, and “Messages received” leads to the unread ones.

The last owner cannot be blocked, deleted or removed from the role, otherwise the only way back into the panel would be editing the database by hand. You also cannot block yourself: this is an error, not a permission.

Sign-in, forgotten password, blocking

• Sign-in in a window. The “Sign in” link in the header opens a form over the page, and after signing in the person stays where they were. Without a script, and where the “not a robot” check is on, the regular sign-in page opens.
• Forgot your password. After the request the person sees the “Check your mail” page: the address is shown with a hidden part, and the “Send again” button becomes active after 60 seconds.
• A blocked person sees a refusal page with the reason and the term, but only after the correct password: a stranger learns neither the reason nor the term.
• Unconfirmed accounts. Users → “Unconfirmed accounts”: accounts that have not confirmed their email and have never signed in. Choose how many days old they must be and press “Move to the trash”: they can be restored from there. They can also be moved automatically with the setting “Move unconfirmed accounts to the trash after (days)”; zero means do not move automatically.
• Location. The profile has a “Location” field; in a theme it is output with the tag {profile.location}.
• Admin panel only from your own addresses. The security settings have the field “Allow the admin panel only from these addresses”: separated by a comma, a space or a new line, an address (203.0.113.17), a subnet (198.51.100.0/24, for IPv6 2001:db8::/48) or the beginning of an address (192.168.). Empty means allow from everywhere. A list without your current address cannot be saved, otherwise you would lock yourself out. A refusal (your address is missing or there is a typo) is shown immediately, and the list you entered stays in the field. If you are locked out (your address changed), the command php nex1on admin:access on the server removes the restriction. From other addresses the panel answers “page not found”. Only an owner can change the list, after re-entering the password; an email goes to all owners.
• Signatures in profiles (off by default, “Signatures in profiles”). A person writes a short signature in their profile (up to 200 characters, three lines, no markup), and modules show it under their comments and forum posts. For a newcomer and for roles without the permission to post links in comments, addresses are cut out of the signature; for others they become links with nofollow.
• Member list (off by default, “Member list on the site”). When on, it opens the page /users with a list of people, search and sorting. The list includes only those who themselves checked “Show me in the member list” and made their profile public: name, avatar and, if allowed, the registration date; no email or sign-in name. The page is closed to search engines.

Site emails

System → Site emails. The emails the site sends by itself (email confirmation, password recovery, the two-step sign-in code, the email code after signing in through a social network, the sign-in link, notification emails) can be rewritten: each has its own subject and its own text in any of the seven languages. If empty, the built-in text is sent. The table shows in which languages a custom text already exists; in the subject and text, substitutions in curly braces are available (the list is shown alongside; extra ones stay as written, and the panel warns you). There is a “Preview” with examples in place of the substitutions, which saves nothing, and “Restore the built-in text” (removes your texts in all languages). The text is plain: markup is shown as is and is not executed.

Emails with links and sign-in codes are protected: a tampered text is a way to deceive your people, so do not add outside addresses and links. Saving such an email requires a password, and all owners get an email about the change.

Send nothing except security emails. Everyone has this checkbox in their profile: email confirmation, password reset and sign-in from a new device always arrive, everything else (replies, private messages, news, emails from new modules) does not.