Permissions Reference

NexusGuild uses Discord-compatible bitwise permission flags. Every role stores a BIGINT bitmask. A user's effective permissions are the bitwise OR of all their role bitmasks, with channel-level overrides applied on top.

Overview

Permissions are 64-bit integers (BigInt in JavaScript). Each permission is a single bit:

// Combining permissions
const canSendAndRead = SEND_MESSAGES | READ_MESSAGE_HISTORY;  // 2048 | 65536 = 67584

// Checking a permission
function hasPermission(userPerms, flag) {
  if (userPerms & BigInt(8)) return true;  // ADMINISTRATOR bypasses everything
  return (userPerms & flag) === flag;
}

How It Works

1. Each server has an @everyone role that applies to all members.
2. Additional roles can grant extra permissions on top.
3. A member's effective permissions = bitwise OR of all their role permissions.
4. Channel-level permission overrides can grant or deny specific flags per role for that channel only.
5. Server owners bypass all permission checks — they always have full access.
6. The ADMINISTRATOR flag grants all permissions, bypassing channel overrides too.

Default @everyone Permissions

New servers give @everyone this bitmask: 103926848

Checking Permissions in Code

Server-side (Node.js)

import { PERMISSIONS, PermissionHandler } from './config/permissions.js';

// Returns true if userPerms includes the flag (or ADMINISTRATOR)
const canSend = PermissionHandler.hasPermission(userPerms, PERMISSIONS.SEND_MESSAGES);

Client-side (via API)

// Fetch your effective permissions when joining a server
const { myPermissions } = await fetch(`/api/servers/${serverId}/members`)
  .then(r => r.json());

const perms = BigInt(myPermissions);

function hasPermission(flag) {
  if (perms & 8n) return true;    // ADMINISTRATOR
  return (perms & flag) === flag;
}

// Usage
if (hasPermission(16n)) {             // MANAGE_CHANNELS
  showCreateChannelButton();
}

Bot-side (via REST API)

// Permissions are returned as strings from the API
const roles = await fetch(`/api/v1/guilds/${guildId}/roles`, {
  headers: { Authorization: `Bot ${token}` }
}).then(r => r.json());

const modRole = roles.find(r => r.name === 'Mod');
const modPerms = BigInt(modRole.permissions);  // parse the string

General Permissions

Text Channel Permissions

Voice Channel Permissions

Nickname Permissions

Server Management

Thread Permissions

Moderation

Quick Reference — All Flags

// All NexusGuild permission constants
const PERMISSIONS = {
  CREATE_INSTANT_INVITE:    1n,
  KICK_MEMBERS:             2n,
  BAN_MEMBERS:              4n,
  ADMINISTRATOR:            8n,
  MANAGE_CHANNELS:          16n,
  MANAGE_GUILD:             32n,
  ADD_REACTIONS:            64n,
  VIEW_AUDIT_LOG:           128n,
  PRIORITY_SPEAKER:         256n,
  STREAM:                   512n,

  VIEW_CHANNEL:             1024n,
  SEND_MESSAGES:            2048n,
  MANAGE_MESSAGES:          8192n,
  EMBED_LINKS:              16384n,
  ATTACH_FILES:             32768n,
  READ_MESSAGE_HISTORY:     65536n,
  MENTION_EVERYONE:         131072n,
  USE_EXTERNAL_EMOJIS:      262144n,

  CONNECT:                  1048576n,
  SPEAK:                    2097152n,
  MUTE_MEMBERS:             4194304n,
  DEAFEN_MEMBERS:           8388608n,
  MOVE_MEMBERS:             16777216n,
  USE_VAD:                  33554432n,

  CHANGE_NICKNAME:          67108864n,
  MANAGE_NICKNAMES:         134217728n,

  MANAGE_ROLES:             268435456n,
  MANAGE_WEBHOOKS:          536870912n,
  MANAGE_GUILD_EXPRESSIONS: 1073741824n,
  USE_APPLICATION_COMMANDS: 2147483648n,
  REQUEST_TO_SPEAK:         4294967296n,
  MANAGE_EVENTS:            8589934592n,

  MANAGE_THREADS:           17179869184n,
  CREATE_PUBLIC_THREADS:    34359738368n,
  CREATE_PRIVATE_THREADS:   68719476736n,
  SEND_MESSAGES_IN_THREADS: 274877906944n,

  MODERATE_MEMBERS:         1099511627776n,
};