> ## Documentation Index
> Fetch the complete documentation index at: https://docs.collabase.ch/llms.txt
> Use this file to discover all available pages before exploring further.

# Version 0.12.2-rc

> Sessions now expire, you can see and sign out your own devices, and the command palette only offers what you may open.

<Update label="v0.12.2-rc" description="Session expiry, device list, permission-aware command palette">
  ## What's new in v0.12.2-rc?

  Signing in used to stay valid for a month, and stayed valid indefinitely for anyone using Collabase regularly. Sessions now end on their own, and everyone can see where their account is signed in.

  ### ✨ New features & improvements

  * **Sessions expire again:** A new **Session lifetime** policy under Settings → Security → Policies signs people out after 8 hours without activity, and after 30 days at the latest. Both defaults apply on every installation and can be adjusted with Collabase Enterprise. See [Security Policies](/admin/security-policies).
  * **See and sign out your devices:** Settings → Profile → Security now lists every device your account is signed in on, with its browser, last activity, and a **Sign out** button. **Sign out all other devices** ends every session but the one you are using.
  * **Devices are signed out on a password change:** Changing your password now ends the session on every other device. The one you changed it on stays signed in.
  * **Limit devices per person:** Administrators can cap how many devices one account may be signed in on. Reaching the limit ends the device that has been idle longest.

  ### 🎨 Layout & UX

  * **The command palette shows what you can open:** Pressing `.` now lists only the pages you have access to, in your language. Space and project settings appear for the spaces you may administer, and administration pages only for administrators.

  ### 🔒 Security

  * **Instance settings are closed to non-administrators:** Opening a page under Settings without administrator rights now returns you to the start page instead of showing an empty administration screen. Your own profile settings stay reachable for everyone.
  * **Disabled accounts lose access immediately:** Disabling an account or signing out a device now takes effect on the next request, instead of when the sign-in eventually expired.
</Update>