Groups & sharing

Groups

A group is a board. It has a name, an order you choose, and a set of apps on it. Every account starts with one called My Apps.

A bookmark belongs to exactly one group. That is deliberate: it makes "who can see this app?" a single question with a single answer. If a bookmark could live in several groups at once, sharing one group could quietly expose an app you only meant to put somewhere else.

To put the same app on two boards, add it twice.

Ownership

A group has exactly one owner: whoever created it. Ownership cannot be transferred, and sharing never confers it.

Deleting an account deletes every group it owns and everything on those groups — including groups it had shared with other people. The confirmation says so.

Sharing

The owner can share a group with other accounts, at one of two levels:

The bottom four rows are owner-only, and that is the load-bearing part of the design: because nobody a group is shared with can share it onward, "who can grant access to this group?" has exactly one answer, forever. There is no delegation graph to reason about and no chain to audit.

Sharing a group

Open the group, click Share, search for a username, and pick viewer or editor. You can change someone's level or remove them at any time; both take effect on their next page load, within about fifteen seconds.

Stop sharing with everyone removes every grant on the group at once.

What a grantee sees

The group appears on their board under a Shared with you divider, labelled with your username. The board itself looks identical to yours — same tiles, same keyboard navigation, same filter. Sharing produces the same shelf, not a degraded copy of one.

What is missing for a viewer is missing, not greyed out: no add tile, no drag, no edit or remove in the tile menu. A line above the grid says Shared by <you> · read-only, or · you can edit for an editor.

Apps an editor adds

An editor's additions belong to the group, and therefore to the group's owner. If you revoke their access, the apps they added stay. If you delete the group, they go with it.

Admins have no special access

An admin can create users and read the activity log. That is the whole of what the role grants.

An admin has no access to anyone else's groups or bookmarks. Asking for one by id returns the same "not found" a stranger gets. If an admin needs to see a group, its owner has to share it with them like anyone else.

This is deliberate. Role governs management, not reach.

Ordering

Each person orders their own groups; that order is theirs and does not affect anyone else's view. A group shared with you has no position of its own, so shared groups are listed by owner and then name.

Within a group, the order of the apps is a property of the group, so everyone who can see it sees the same arrangement. An editor rearranging a shared board rearranges it for the owner too.