title: "v1.3 — Security, Member Management & Optimizations" description: "Critical security fixes, complete organization member management, multi-company card scanner, inbox scoping and UX improvements." lastUpdated: "2026-05-17" author: "GoWeBa – Product Team"
GoWeBa v1.3 — Security, Member Management & Optimizations
🔒 A security-focused release with complete organization member management and communication flow optimization. This major update eliminates 5 security vulnerabilities, implements a full member management system with billing sync, and optimizes the business card scanner for multi-company detection.
📅 Date: May 17, 2026 🏷️ Version: 1.3.0 🟢 Status: Current version
🔒 Critical Security Fixes
Per-User Data Scoping
Fixed an issue where certain system roles could see unauthorized data in the WebaBox. Filtering is now 100% based on assigned accounts — no exceptions.
| Component | Fix |
|---|---|
| Inbox Threads | Systematic filtering by assigned accounts, no bypass |
| Inbox Snapshot | Added account filtering to message counters |
| Trash | Added scoping for deleted messages |
| Inbox Sidebar | Conditional display based on organizational role |
Contact Isolation
The Contacts module now filters exclusively by the user's active memberships. System roles control access to admin pages, not business data.
👥 Complete Member Management
Adding Members
Organization admins and managers can now add members directly from the Directory:
- Organizational email creation — If the org has a verified domain (e.g.,
@tek-rebar.com), a professional email is automatically created - Availability check — Username is verified in real-time before creation
- Welcome email — A welcome message with credentials is automatically sent
- Stripe sync — Subscription seat count is automatically adjusted
- Existing member support — An existing member without an org email can now receive one without being blocked
Removing Members
Removing a member automatically triggers:
- Org email suspension — The
OWNEDemail getsSUSPENDEDstatus - Alias release — Shared aliases (e.g.,
sales@) are unassigned and available for reassignment - Departure email — The member receives a notification
- Stripe adjustment — Automatic seat decrement
- Self-protection — An admin cannot remove themselves
📇 Business Card Scanner — Multi-Company Detection
AI-Suggested Editable Tags
When scanning a business card, WEBA now suggests relevant tags that users can edit, add or remove before saving.
Multi-Company Profiles
A front/back card showing 2 companies is now properly detected. The interface displays each profile separately with company-specific tags linked to each role.
✉️ Compose — Organization Grouping
The sender selector in the compose modal now groups addresses by organization with visual headers, filters suspended accounts, and shows only assigned aliases.
🔗 Thread Matching — Improved Algorithm
Fixed the email conversation grouping algorithm. Replies are now correctly associated with the original thread, even when Message-IDs are slightly modified by certain email clients.
🎭 Impersonation — Improved Flow
When an admin impersonates a user who must change their password, they are no longer stuck in an infinite loop. A close button ("X") appears, allowing free navigation.
📊 Change Summary
| Metric | Value |
|---|---|
| Security bugs fixed | 5 |
| New features | 4 |
| Files modified | ~35+ |
| Schema change | 1 (added companyRoleId — compatible, zero data loss) |
| Contacts imported | 48 (Houston TX — Tek Rebar) |
🚀 Coming Next
- v1.4 — Advanced automations and custom workflows
- v1.5 — Analytics dashboard and custom reports
- v2.0 — WEBA autonomous agent with action execution
💡 Have a suggestion? Contact us at support@goweba.com or ask WEBA directly!
— The GoWeBa Team 💚