Build 3.9.9060

New Features

Collaborator Service Accounts in the Web and Desktop App

We are introducing a web and desktop interface for creating and managing Collaborator Service Accounts (CSAs), so Owners and Admins no longer need the API. Administrators can create a CSA, choose the filespaces and folders it can access with read or write permission, and add secret keys from the same view.

• Administrators can see every CSA in the workspace, including who created each one, and manage secret keys.
• New secret keys expire after 3 months by default, and you can change the expiration when you create the key.
• Administrators can remove a secret key from a CSA.
• Each CSA has View access and Manage access modals for reviewing and changing its filespace and folder permissions.

Important Notes

• Only Owners and Admins can create and manage CSAs. Filespace admins cannot.
• CSAs are removed from the Everyone group, so they no longer inherit its permissions. Grant access directly to each CSA.
• The access views show only permissions granted directly to the CSA, not access through groups. Showing group access is coming in a future update.
• Single-use keys are not available in the web app.
• You can remove a key in the web app, but you cannot rotate it.

Improvements

• Introduced rate limiting on all flows that require email verification codes.

Bug fixes

• Fixed an issue where service account permissions were not transferred during a filespace upgrade.
• Fixed an issue where users were prompted twice to reconnect their cache location when not present.
• Fixed an issue where a new daemon instance could attempt to bind to an already occupied port.
• Fixed an issue where macOS may attempt to incorrectly set an attribute on a file, locally, that was copied from a filespace.