Platform
80eight Platform — v2.3.0
A focused release strengthening how administrative access is granted and enforced.
2.3.0 was an internal-only cut with no customer-facing changes. It replaces broad administrator roles with fine-grained, capability-based permissions across our internal tooling — the controls that govern who on our side can see or do what.
Access control
- Capability-based permissions. Every privileged internal action is now gated on a specific, named capability rather than a general administrator role, so access is granted narrowly and deliberately instead of in bulk.
- Read and write tiers are genuinely separate. Roles intended for viewing only are enforced as read-only everywhere they appear.
- Named-role enforcement on sensitive operations. Resetting a customer's two-factor, editing banking details, handling trade requests, granting access and advancing an asset listing each require their own explicitly named role.
- Governed, audited roles. Role definitions live in one place as templates, and access grants and role changes are recorded.
(No web, app or API changes — customer-facing products were not part of this release.)