((p "Every user is associated with some basic privileges." " " "These are specified in the " (a (@ (href . "00001010040200")) "user zettel") " with the key " (kbd "user-role") "." " " "The following values are supported:") (dl (dt (a (@ (id . "reader")) (@L (@H "“") "reader" (@H "”")))) (dd (p "The user is allowed to read zettel." " " "This is the default value for any user except the owner of the Zettelstore.")) (dt (a (@ (id . "writer")) (@L (@H "“") "writer" (@H "”")))) (dd (p "The user is allowed to create new zettel and to change existing zettel.")) (dt (a (@ (id . "creator")) (@L (@H "“") "creator" (@H "”")))) (dd (p "The user is only allowed to create new zettel." " " "It is also allowed to change its own user zettel."))) (p "There are two other user roles, implicitly defined:") (dl (dt "The anonymous user") (dd (p "This role is assigned to any user that is not authenticated." " " "Can only read zettel with visibility " (a (@ (href . "00001010070200")) "public") ", but cannot change them.")) (dt "The owner") (dd (p "The user that is configured to be the owner of the Zettelstore." " " "Does not need to specify a user role in its user zettel." " " "Is not restricted in the use of Zettelstore, except when a zettel is marked as " (a (@ (href . "00001006020400")) "read-only") "."))))