Authorized users are added to an blog's /WEB-INF/(blog-id)/authorization.properties file. The usernames and passwords in this file control the users that can access the individual blog either via the administration console or XML-RPC. The format of this file is as follows.
Each separate line represents an individual username and password combination. You may associate an e-mail address with the username by adding a "," and the username's e-mail address. The e-mail address is used to send the username an e-mail message if they forget their password. If the e-mail address is not present, the username is assumed to be associated with the blog owner and therefore an e-mail message in this case would be sent to the blog owner's e-mail address.
Edit the permissions file located in $TOMCAT_HOME/webapps/blojsom/WEB-INF/default/permissions.properties. This file specifies the users permissions on the individual blog. The format of this file is as follows.
Each separate line represents an individual username and permission combination. The permissions page describes more on individual permissions for blojsom components.