Shared boards — firms, invites and roles

Until now everything in GitGumbo belonged to a single user account. That works until a second person needs to see the board, at which point the only options were sharing a password or giving up — and people do share the password, which is why we would rather build the alternative.

Projects, boards, sync history and billing now belong to a firm. Every account gets a personal firm automatically, so if you are working alone nothing about this is visible to you and nothing needs setting up.

• Invites — invite someone by email; the invite is consumed when they sign in, and consuming it is idempotent, so two simultaneous sign-ins cannot produce two memberships.
• Roles — members have roles, and the role decides what they can change rather than merely what they can see.
• One subscription per firm, billed with seats, instead of a subscription per person who happens to have connected the same project.

An invite that has been sent but not accepted still holds a paid seat, which we consider a bug in waiting rather than a feature, and expiry is on the list.