One HisarBlok installation could already run several sites, but every account saw every site. 0.13 changes that. Every item is from the changelog.
Accounts limited to some sites (0.13.0)
Under People → Sites an account can be limited to some of the installation's sites, with a role per site: editor on one, administrator on another. A limited account sees only its own sites; the site picker, the command palette and the overview list no others. People, modules, updates, backups, exports and mail settings always stay with the administrators of the whole installation. An account with no list works as before.
Giving an account an administrator role on any site asks for the password again, and a change that would take away the last administrator of the whole installation is refused. The audit log now also records which site each entry belongs to.
We want to be plain about the limit, too: the sites of one installation still share one PHP user, one data/ folder and one database. People who must never reach each other's sites belong in separate installations.
The authorization review before the release found two medium issues, both fixed in this version: new-comment and forum notices could reach accounts of another site, and two sites' per-language settings could share one key.
An accessible admin (0.13.1)
The admin had its first full review against WCAG 2.2 AA:
- Two minutes before an idle session would be dropped, a dialog offers Stay signed in; ten minutes before a sign-in's eight hours end, a dialog says so.
- The Ctrl+K palette, the confirmation dialogs and the phone menu work end to end from the keyboard; closing one gives the focus back where it came from.
- The statistics chart's numbers can be read as a table too.
- A refused page save no longer loses what was typed, and tells a screen reader which field is wrong.
- Badges, danger buttons and state colours reach enough contrast in light and dark; the reduced-motion setting stops every animation.
Status
HisarBlok is still in development; the source code and a download package are coming soon. A summary of every release is in the changelog.