What an app can reach
An app on your server can't touch your things until it's allowed to. Each thing it can reach is a grant, and you see every one in plain words. This page is about choosing them; if you make apps, see Grants.
When an app is installed
Whoever installs an app sees each thing it asks for, and turns on only the ones they're happy with. The rest aren't granted.
Some grants reach further, and carry a warning:
- Reach the internet: it could send what it reads anywhere.
- Add, change and delete your files, or your photos: it could delete them.
- Send mail as you: people will see mail from you.
- Make and change your Sols, and see what they remember: it could change or remove your Sols.
- Grants that manage people, sign-in or the audit log, which only work when someone allowed to do those things uses the app.
An app never gets more than the person using it has. Grants an app has for your files, mail or calendars reach your own, as you.
Change what an app can use
- Open Settings › Apps.
- Choose the app.
- Under What it can use, turn each grant on or off. It changes straight away.
Settings › Privacy lists, under Apps that reach far, the apps that can reach the internet, delete what's yours or act for you. You can change them from there too.
Who can change an app's grants:
- Your own apps, marked Just you: you.
- Apps for everyone at home, and the apps that come with Solel: admins only. Everyone else can see what they use.
Without Reach the internet, the part of an app that runs on your server is kept off the internet. Turning that grant on or off restarts that part.
Children
A child doesn't install apps. They see what an app asks for, leave on what they'd like it to use, and choose Ask a parent. Their parents get a notification, and a parent or admin chooses what it can use in Settings › Apps before installing it for them, or says no.
Later, a child can turn any of an app's grants off themselves, but can't turn one on. The app's page tells them to ask a parent to let it use more.
When an app is updated
A new version keeps the grants it had, as long as it still asks for them. Anything new it asks for isn't granted until someone approves it. See Updating and removing apps.
For the household's rules about who may install apps, see Apps and what they can reach.