Teams, roles and 44 fine-grained capabilities, one action each. Give a contractor one folder, require two-factor for the people who can delete things, and see who did what on a single timeline.
Roles are named sets of capabilities your team edits and resets. A folder share hands someone one corner of the fleet without widening what they can do elsewhere. Every action is enforced server-side, in the dashboard and over the API alike.
Everything belongs to a team and the URL names it. The Activity trail answers who, what, when and where, with filters that are links. Passkeys, two-factor policies per team or per role, breach-checked passwords and expiring API tokens are all in the product, with no shell and no database edits.
Install takes one command on a server you already pay for. What you do with the money you get back is your business.
