Session expiry, device list, permission-aware command palette
What’s new in v0.12.2-rc?
Signing in used to stay valid for a month, and stayed valid indefinitely for anyone using Collabase regularly. Sessions now end on their own, and everyone can see where their account is signed in.✨ New features & improvements
- Sessions expire again: A new Session lifetime policy under Settings → Security → Policies signs people out after 8 hours without activity, and after 30 days at the latest. Both defaults apply on every installation and can be adjusted with Collabase Enterprise. See Security Policies.
- See and sign out your devices: Settings → Profile → Security now lists every device your account is signed in on, with its browser, last activity, and a Sign out button. Sign out all other devices ends every session but the one you are using.
- Devices are signed out on a password change: Changing your password now ends the session on every other device. The one you changed it on stays signed in.
- Limit devices per person: Administrators can cap how many devices one account may be signed in on. Reaching the limit ends the device that has been idle longest.
🎨 Layout & UX
- The command palette shows what you can open: Pressing
.now lists only the pages you have access to, in your language. Space and project settings appear for the spaces you may administer, and administration pages only for administrators.
🔒 Security
- Instance settings are closed to non-administrators: Opening a page under Settings without administrator rights now returns you to the start page instead of showing an empty administration screen. Your own profile settings stay reachable for everyone.
- Disabled accounts lose access immediately: Disabling an account or signing out a device now takes effect on the next request, instead of when the sign-in eventually expired.
.png?fit=max&auto=format&n=V5LGcGniNC1X_QJO&q=85&s=8c9ba3ce9a0d0045976180c9f669af26)
