Share it · 15
A board shared with a teammate
Someone who only reads what others share needs nothing of their own: no connection, no model, no password to the database. The board runs for them on the owner's connection, and the owner decides who sees it.
Sharing it
- The owner opens Share on a board. And picks a teammate, or types the email of someone who is not on the team yet.
- The person is put on the team, and given this board. A place is held for someone new until they accept. Someone invited twice is one person, not two.
- An invitation is emailed. It names the team and who invited them.
Opening it
- The teammate signs in and opens the board. The link alone gives nothing: it is who they are that is checked.
- Whether they may see it is decided in one place. They are the owner, or an active member of the team that this board was given to. The same check serves a board embedded on a website, so the rules cannot drift apart.
- Each tile's query is taken from the board, never from the page. A tile that is not on this board is not found. The owner can see a tile's SQL; someone it was shared with cannot.
- It runs on the owner's connection, read-only. The teammate never holds the database's password and never needs a login to it, and every run is logged.