Groups, sharing and what stays each person's (#896)
The amended promise on Accounts and invitations, a section on groups and sharing (owner,
share, what stays yours, the trail, changing the owner, leaving, conflicts, imports), and
the plugin guide's new events and scoping calls.
Refs postulo/postulo#896
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Say that single sign-on links by address only when turned on, and the db container's .env
Linking by email address is off by default since 0.6.0 (postulo/postulo#892), with the
start-up warning for an instance that has a provider and has not chosen; and the PostgreSQL
profile's database container is handed the whole .env, which Hardening now states and says how
to close (#791).
Refs postulo/postulo#892, postulo/postulo#791
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Say how single sign-on and invitations treat addresses, and the new skill-group example
Single sign-on matches only an address the local account has verified (postulo/postulo#730),
an email-bound invitation no longer verifies its address (#732), and the skills example is
"Programming languages" (#690).
Refs postulo/postulo#730, postulo/postulo#732, postulo/postulo#690
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Show the interface the pages describe, with pictures generated from a demo instance (#353)
Thirty-four pictures from scripts/screenshots.py in the postulo repository, each with alternative text, placed beside the text that describes it. Never retake one by hand: run the script.
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Backups and your data: the archive's new contents, the spreadsheet import's rules, restore onto a fresh database, the key check
Backups-and-your-data: reminders about no application, the files an application went out with
and where a sent document went travel in the archive, an older archive restores without them,
and every record is built only from the fields Postulo writes. A spreadsheet status is matched as
whole words, a row with no status is decided by its date, a listing keeps its deadline and tags.
Expired export archives are also deleted by the export page. Restore counts a never-migrated
database as empty and counts every secret under the field key. Accounts-and-invitations: what an
account deletion removes from disk.
Refs postulo/postulo#467postulo/postulo#468postulo/postulo#471postulo/postulo#394
Refs postulo/postulo#334postulo/postulo#469postulo/postulo#354postulo/postulo#476
Refs postulo/postulo#481postulo/postulo#539postulo/postulo#355
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Say what an administrator is trusted with, and what Django's admin holds
An administrator sees accounts and never anyone's records in Server settings, but is
trusted with the instance because they install plugins. Appointing one no longer makes
them a superuser, and the admin holds accounts, invitations and token metadata only.
Adds the command that clears the flag from administrators appointed earlier.
Refs postulo/postulo#368
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Say where the help is on Your details, and what it does for 1.4.13 and 3.3.2
Design: what a field's help is, the question mark on a card, and a section on help --
the tooltip, where it is drawn and when it is not, what stays in sight, the drawer, and
help as templates. Accessibility: what a person can expect of it and how it is tested.
A line pointing at each card's help topic where the wiki explains the same thing.
Refs postulo/postulo#302
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Where an operator mounts the admin, it sends whoever is not signed in to
Postulo's sign-in and brings them back afterwards. So an administrator is
asked for their code, needs a confirmed address, and is held to the same
limits on failed attempts as everybody else. Three pages said its login was
rate-limited, which described a form that is gone: Hardening, Accounts and
invitations, and the `POSTULO_ADMIN_URL` row of Configuration.
Refs postulo/postulo#367
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Say that a menu is one component, drawn in the top layer, and that People has pictures
Every menu opens over the page, tied to its trigger, so none is cut off
by a box that scrolls; the account menu and More became the same
component.
Refs postulo/postulo#310
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Take the pages over from postulo/wiki, which this repository now replaces
Until now this was a copy of postulo/wiki, refreshed by postulo's
scripts/publish-wiki.sh whenever somebody remembered to run it. The last
time was 5 September (postulo@9645ee1). This brings it to postulo@b6cfb8f7:
- the four pages that never arrived: Accessibility, Hardening, Listings
and Reports;
- the seventeen that had changed since;
- the images, which the script never copied because it copied *.md and
nothing else, so Home has shown its logo and its Buy me a coffee button
broken since the day they were added.
Nothing here was lost: every earlier commit is a publish, and the pages
they left matched postulo/wiki at 9645ee1 exactly.
From here pages are written in this repository and nowhere else.
Refs postulo/postulo#169
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
