Editing Technical:Back-end Server (section)

=== Authentication and access control ===
{| class="wikitable"
|+users
!Key
!Type
!Nullable / Default
!Description
|-
|id
|uuid (PK)
|NOT NULL
|
|-
|username
|varchar
|NOT NULL
|
|-
|password
|text
|NOT NULL
|
|-
|email
|text
|NOT NULL
|
|-
|activated
|boolean
|NOT NULL, false
|
|-
|created_at
|timestamptz
|
|
|-
|updated_at
|timestamptz
|
|
|}
{| class="wikitable"
|+user_tokens
!Key
!Type
!Nullable / Default
!Description
|-
|id
|serial (PK)
|NOT NULL
|
|-
|user_id
|users.id (FK)
|NOT NULL
|
|-
|type
|enum

* login
* activate
* reset
* deactivate
* otp
|NOT NULL
|
* One time token for logging in via website
* Token to activate the account
* Token to reset account password
* Token to confirm account deletion
* Time-based one time password (TOTP) secret key
|-
|token
|text
|NOT NULL
|
|-
|expires_at
|timestamptz
|
|
|-
|created_at
|timestamptz
|
|
|}
Each moderation action is recorded into the database, even if it was a one-off action.
{| class="wikitable"
|+moderations
!Key
!Type
!Nullable / Default
!Description
|-
|id
|serial (PK)
|NOT NULL
|
|-
|type
|enum

* user_ban
* ip_ban
* mute
* server_kick
* server_ban
|NOT NULL
|
* User is banned from logging in
* IP address is banned from logging in or creating accounts
* User is banned from using chat (timed out). If server_id is set, only applies to that server
* User was kicked from a server. server_id shows which server this action was taken in
* User is banned from a specific server, indicated by server_id
|-
|description
|text
|NOT NULL
|
|-
|notes
|text
|
|Private notes for moderators
|-
|server_id
|servers.id (FK)
|
|Server related to this moderation action
|-
|actor_id
|users.id (FK)
|
|Moderator/Admin who created this event
|-
|user_id
|users.id (FK)
|
|Moderated user
|-
|report_id
|player_reports.id (FK)
|
|ID of the player report associated with this moderation action, if applicable
|-
|ip_address
|inet
|
|Host or network
|-
|expires_at
|timestamptz
|
|
|-
|created_at
|timestamptz
|
|
|}
The role system is used to differentiate moderators and administrators from regular players.
{| class="wikitable"
|+roles
!Key
!Type
!Nullable / Default
!Description
|-
|key
|varchar (PK)
|NOT NULL
|
|-
|name
|varchar
|NOT NULL
|
|-
|default
|boolean
|
|
|-
|server_id
|servers.id (FK)
|
|If set, role only applies to specific server
|-
| colspan="4" |many-to-many relation with users
|}
Grants are the actual actions that each role has the permission to do.
{| class="wikitable"
|+grants
!Key
!Type
!Nullable / Default
!Description
|-
|key
|varchar (PK)
|NOT NULL
|
|-
|name
|varchar
|NOT NULL
|
|-
| colspan="4" |many-to-many relation with roles
|}