Twenty 2.45 adds record-level sharing and hardens 2FA

Twenty 2.45.0 adds record-level sharing. Users can share records beyond the recipient's role, from every object, from the record panel and from object settings. A new "All records" permission and ownership transfer are included. One row access policy now covers queries, events and writes.

Twenty also hardened two-factor authentication against impersonation and OTP guessing. Applications and workflows can now start conversations in a member's chats. Application workflows run with the owning application's permissions and cannot include email or calendar steps.

The release carries one breaking change: Twenty removed the compatibility code kept for the 2.44 rollout. It also dropped the legacy campaignDelivery and messageSuppression tables. Teams upgrading should read the full changelog first.

Source: github.com