Users and database inspection
Inspect database structure and user access; distinguish information views from changes to a user identity or role.
Database: Size and Show create
/system/database opens the Size view: table sizes, index sizes and metadata row counts. These row counts come from database metadata and are estimates, not proof of import completeness.
Show create displays the current environment's table definitions. Use it to verify whether a column or index exists, then use field meaning to understand it. _new and _old tables may be refresh staging or previous copies; their presence alone is not a fault. This page neither migrates nor deletes tables. Schema ownership is in data model.
Users: inspect before changing access
/system/users lists users. A user's detail view shows the account and visit history; the role views show the configured roles and their permissions. Visit history is activity data, not a log of every database change.
The user editor can change the email and role. Email is the identity matched after the access proxy supplies it, so changing it affects which identity reaches that account. The role controls access to modules and pages. Save only the intended identity and role, reopen the user, and verify the intended permission after the cached session refreshes. The cache duration is AUTHORIZATION_CACHEUSERTIME; a saved role is not necessarily reflected in an already-open session.
New identities are provisioned as Guest according to the authorization configuration. Role permissions are generated from config/reference/userroles.json and the page scan during install; editing one user's role does not edit the role's permission matrix.
Permission to read docs does not grant permission to open all screens named inside them. A Help link explains a screen but does not bypass its access check. API and public-dashboard tokens use separate guards; see interfaces.
Related
Evidence
Code-checked: app/http/system/database.php, app/data/system/database.php, templates/main/system/database.tpl, app/models/database.php::getsize(), app/http/system/users.php, its endpoint and templates, app/models/users.php, app/models/authorization.php, public/index.php and config/reference/userroles.json.
- Type
page - Status
active - Updated
2026-09-14 - Created
2026-09-14 - Covers
system/databasesystem/users