Tighter Access Controls for Shared Caps
A round of hardening across sharing and sign-in.
- Comments require access - Posting a comment now requires permission to view the Cap it belongs to.
- Downloads respect sharing - Downloading an organization video requires an explicit share, not just a guessable link.
- Login codes expire on time - Email login codes now expire after the advertised 10 minutes.