Conduit lists these with the sessions. Running one asks for its blanks and where to send it; nothing runs by itself. UltraPuTTY doesn't show them.

Each is encrypted on an Editor's PC to each person's key, so neither this page nor Library Manager can read it. Add, change and use them in Conduit (Options › Credentials); compare a fingerprint with its owner before you share. UltraPuTTY doesn't show them.

Kept on this server as long as Privacy and retention says. Each play and download goes in the library's history.

Conduit records sessions only where a library's rules require it, and shows Recording on the tab while it does.

Server administrators also have full access to every library.

They can do everything in every library, and create, rename and delete libraries. People named in the server's configuration (Auth:Administrators) are server administrators too.

Rename, move or delete here and your PCs pick it up at their next sync; everything else is changed in the app. Saved sign-ins aren't shown: they're encrypted on your PCs.

Opening someone's space is recorded in the server's history under their name. You can look at their sessions and copy them into a Team Library, for example when someone leaves; only they can change them. Saved sign-ins are only counted: they're encrypted on each person's PCs and the server can't read them.

Allowed: works as usual. Read-only: signs in, opens libraries and syncs its own sessions, but can't change Team Libraries. Turned away: every call gets your message. An app older than its minimum version is turned away too. The web page is always allowed, and anything else (scripts and programs the server doesn't know) is always turned away.

Updates

When you set a latest version, apps that know about it (Conduit) tell people on an older one that it's out, with a link to the download for their system. Leave a download empty if there isn't one for that system. An app below its minimum version still gets the link, even though it's turned away.

Apps say which app and version they are. This manages versions; it isn't a lock: roles, and which sessions and libraries exist, are checked by the server whatever the app.

Each source fills one library's folder on its schedule, and only ever changes or removes the sessions it made. Every change is in the library's history as "inventory" and the source's name, and apps pick it up like any other. A run that can't read its source changes nothing.

Tokens and passwords stay in the server's settings, environment or secrets files (Inventory:Credentials, README "Secrets"): this page only names them.

Activity

Who has looked at, copied from or deleted this space.

Roles are worked out as the server does when someone signs in: from the members that name them, the groups the directory says they're in (nested groups count), and the server's settings. When the server runs on Windows, Windows sign-in also counts the groups their Windows sign-in carries, which this check can't see.

How long things are kept

Retention is set in the server's settings (Retention:HistoryDays, Retention:AppUsageDays); the server removes what's past it every 6 hours. Privacy and retention says what each kind of data is.

SSH certificates

Issued