Passbolt vs AFFiNE

Three consecutive releases have gone into permission transparency. 5.14 introduced confirmation prompts before editing shared resources and surfaced group members in the access list; 5.14.3 corrected two behaviours it got wrong; 5.15 adds badges showing whether a permission is added, modified or deleted, and lets a deletion be rolled back before confirmation. 5.15 also moves sessions into the database with a PurgeSessions command and a healthcheck reporting the active provider, and closes three externally reported bypasses around personal-folder sharing and V5 tag promotion.

The product is treating accidental over-sharing as its primary risk, and the fix is repeated iteration on the moment of change rather than a new permission model. The company has said this is staged work — folder moves and richer preview dialogs are named as future extensions. In parallel the platform side is maturing for larger installs: database-backed sessions, edition switching in-app since 5.13, healthcheck coverage, SCIM administrator-deletion guards. Autofill has just started its own multi-release arc, with 5.15 explicitly the first step.

The next release should extend confirmation prompts to folder move operations, and the notes flag that the SSO egress guard will default to on. Autofill form classification is the other named thread, with a technical write-up promised after the following release.