Workspace Sharing
Control exactly what your service provider can see. Share specific lists, not your entire workspace.
How Sharing Works
When you hire a provider through Studio, a dedicated engagement workspace is created. You control which lists within that workspace the provider can access.
Workspace: "Studio: Your Org × Foobar Studio"
├── Design Tasks (shared, editor)
├── Internal Notes (not shared)
├── Budget Tracking (shared, viewer)
└── Deliverables (shared, editor)
Sharing Principles
Atomicity
Each share grants access to exactly one list
Consistency
Revoking access takes effect immediately
Isolation
Provider sees only lists you explicitly share
Durability
Bearer codes are hashed and survive restarts
Roles
| Role | Can do |
|---|---|
| Editor | Create, update, and complete tasks in the shared list |
| Viewer | Read tasks but cannot modify them |
| Owner | Full control including sharing with others and deletion (client only) |
Revoking Access
To revoke a provider's access to a list:
- 1. Go to your engagement workspace settings
- 2. Find the list in the "Shared Lists" section
- 3. Toggle sharing off or click "Revoke"
- 4. The provider immediately loses access
Behind the scenes, the bearer code is invalidated, the SpiceDB relationship is deleted, and the provider's UserListMetadata entries are removed — all atomically.