Fixed a security problem: cloud storage could be added or changed by someone who wasn't signed in. Only super and root users can now add, change or delete it, and only for their own organisations.
Automated Maintenance can no longer be set to delete sessions older than 0 days, which deleted every session. Maintenance also never deletes a session it has just stopped, leaves anything in the backup folder that isn't a dated backup, and deletes nothing on a day a backup copy fails.
Fixed a security problem: a super user could change, reset the password of, or delete a root user, users in other organisations and Fulcrum's support account. Super users now only manage users below root in their own organisations, and the last root user can't be deleted or demoted.
Fixed: the Remux HLS TS to MP4 and Add endlist to M3U8 repairs could be run by any user, and a session's angles could be opened from another organisation. Repairs now need an admin, and angles only open for their own organisation.
Fixed a security problem: a session from another organisation could be opened, changed or deleted by typing its number into the address. Sessions and their markers now only open for their own organisation.
Live export storage on the Settings page can now only be added or changed by signed-in super and root users.
Markups, qualifier lists, scoreboards, scoreboard templates and camera groups can no longer be opened or changed from another organisation. Delete All on the Sessions page now deletes only your organisation's sessions, and Manage Organisation only adds or removes the users it lists. Live sessions are kept, and only root can change global scoreboards; others can duplicate them.
