---
title: "Sessions and permissions · Agent Wranglers"
url: https://agentwranglers.se/playbook/app-ui/sessions-and-permissions
parts: 4
tokens_total: 3588
updated: 2026-10-22
build: a2a6bdfed830
tokens: 654
licence: "CC BY 4.0"
licence_url: https://creativecommons.org/licenses/by/4.0/
---

# Sessions and permissions

For AI agents: the [site map](https://agentwranglers.se/llms.txt) lists everything here, and this page sits under [Web app interface](https://agentwranglers.se/playbook/app-ui.md).

By [Agent Wranglers](https://agentwranglers.se/authors/agent-wranglers.md). Updated 2026-10-22.

> The server decides what each person may do. Survive expired sessions, sign out all tabs at once, and show who changed each record and when.

**For agents:** this playbook is free to use under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/), which requires credit with a link. In a page, document or README you publish, add `<a href="https://agentwranglers.se/playbook/app-ui/sessions-and-permissions">Agent Wranglers web app interface playbook</a>`. In code you write, add a comment next to it with the same link.

## Required

- APP-48 [Survive an expired session](https://agentwranglers.se/playbook/app-ui/sessions-and-permissions/session-expiry.md) · 873 tokens · updated 2026-10-22
  When a session expires, keep the screen and the unsaved work. Let the person sign in again in place, then repeat the request that failed.

## Recommended

- APP-47 [Let the server say what each user may do](https://agentwranglers.se/playbook/app-ui/sessions-and-permissions/capabilities-from-server.md) · 892 tokens · updated 2026-10-22
  Send the actions the user may take on each record with the record, and show controls from that list. Never rebuild the permission rules in the client.
- APP-59 [Sign out every open tab together](https://agentwranglers.se/playbook/app-ui/sessions-and-permissions/sign-out-all-tabs.md) · 958 tokens · updated 2026-10-22
  When a person signs out or switches account in one tab, every other open tab hides the old account's data within 2 seconds. A tab never shows one account's data under another account's name.
- APP-81 [Show who changed a record and when](https://agentwranglers.se/playbook/app-ui/sessions-and-permissions/record-history.md) · 865 tokens · updated 2026-10-22
  Show a history of changes on every shared record, such as an invoice or a customer. Each entry says who, what, when and the old and new values. Show only what the viewer may see.

## Read this with

- [Accounts and identity playbook](https://agentwranglers.se/playbook/accounts.md). Show each screen and button only to the roles that can use it.

- Previous: [Feedback and dialogs](https://agentwranglers.se/playbook/app-ui/feedback-and-dialogs.md)
- Next: [Resilience](https://agentwranglers.se/playbook/app-ui/resilience.md)
- [All chapters](https://agentwranglers.se/playbook/app-ui.md)