Users & admin

calit is multi-tenant: each user has a fully isolated scheduling setup. Site admins have an additional management interface for all user accounts.

Site admins

Users with the is_admin flag are site administrators. The first user created via /setup receives this flag automatically. Admins access the user management interface at /me/users.

From there, admins can:

• View all registered user accounts.
• Create a new user by invitation (see below).
• Lock or unlock an account. A locked user cannot log in.
• Promote or demote the admin role on existing accounts.

Inviting a user

To add a user, an admin enters their username and email address — no password. calit creates the account in a dormant state (it cannot be logged into yet) and emails the person an invitation with a link to set their own password and activate the account.

• The activation link is valid for 48 hours and can be used once.
• Until they activate, the account shows Awaiting activation in the user list. Dormant accounts cannot log in.
• If the link expires or the email is lost, use Resend invite next to the pending user to send a fresh 48-hour link.
• Activating the account takes the user through the normal first-run setup so they can complete their profile and availability.

The invitation email is sent using your configured mail server (MAIL_*) and the public base URL (APP_BASE_URL) — no additional configuration is required.

Data isolation (owner scoping)

Every piece of data — meeting types, availability rules, bookings, settings — is tied to the user who owns it. One user can never read or modify another user’s data. This applies at the database query level; there is no admin override that exposes another user’s private data.

Public signup

By default, /signup returns 404 and no new users can self-register. To allow public registration, set the environment variable:

SIGNUP_ENABLED=true

This requires a server restart to take effect (the setting is read at startup). Set it back to false and restart to close registration again.

When signup is enabled, new accounts are created as regular users (not admins). Admins can later grant the admin role through /me/users.

Related configuration

See Configuration for the full list of environment variables including SIGNUP_ENABLED and user-related settings.