Falcon Rundown 1.3.0 Changelog
Version 1.3.0 introduces Access Groups for reusable workspace permissions while keeping the existing individual permission model fully available.
New Feature: Access Groups
- Reusable team permissions: Create named access groups such as Editors, Producers or Guests and define one shared role and rundown policy for the group.
- Individual or group-based access: Each member uses either individual permissions or one access group. Existing members remain on individual permissions until they are explicitly moved to a group.
- Inherited permissions: Members assigned to a group immediately inherit its role and access to all rundowns or a selected set of folders and rundowns.
- Group-aware invitations: Assign an access group when inviting a new member, or change the permission source for an existing member.
- Central updates: Editing a group updates every assigned member. Groups in use are protected from deletion until their members are reassigned.
- REST API support: REST v1 now supports listing, creating, reading, updating and deleting workspace access groups using opaque
agp_...IDs.
See Managing Members for the complete Access Groups guide.
Improvements
- Cleaner Members window: The modal is wider and uses more compact permission controls so member name, permission source, role, filter and inherited status fit more clearly on one row.
- Improved Access Group editor: Group creation and editing use a cleaner layout consistent with the existing input styling.
- Clear permission source: The Members window shows whether access is managed individually or inherited from a named group.
- Consistent filtered access: When a filtered group member creates a permitted folder or rundown, it is added to the group policy for the other group members.
- Backward-compatible migration: Existing workspace members keep their current role and filters as direct permissions when Access Groups are introduced.
Fixes and Reliability
- Fixed an audit-log schema mismatch that could cause a 500 error when creating an access group.
- Permission resolution now fails closed if an assigned access group is missing or invalid.
- Workspace, folder, rundown, asset, favourite, schedule and REST operations now use the same effective permission source consistently.
- Access Group writes use transactions, ownership checks and version-aware updates to reduce conflicting changes.
- Filtered access is enforced consistently when listing, reading and creating workspace content.