ive run around the documentation and dont see anything about it. i do see a "username" and "password" block in uniuploader, but do not see how to create users or passwords in wowroster.

what can i do to help secure things more? i had to turn everything on "public" to get updates to work for people. im pretty confused about security administration on this app

I am currently working on an addon that will add user management and login capabilities to Roster. The Roster developers were not up to tackle user administration in this version (they had alot of other overhauling). However I do believe Roster 3 will have built in user management.

The Accounts addon is almost to beta release status, and should be available to the community in the next few weeks.

Alternately, you can use a CMS like DragonFly, then get the WoWRosterDF module. That would allow you to better secure Roster in your site.

Roster allows limited security natively. There 3 fixed users, differentiated only by their password. You can set these passwords in the RosterCP. Then, you can set guild-level access, for example, on your guild uploads, and anyone with the guild password will be able to upload guild data.