We just pushed the first stage of our modern auth project to Prosody’s development branch! In previous versions of Prosody (0.12 and earlier), Prosody’s internal API only really supported one type of permission check: “is this user an admin?”. Our new work replaces this with a fully flexible roles/permissions system. Upgrading to the new system Despite all our excitement about this new feature, the new changes are designed to be largely invisible to server admins by default.