Stacker V4 (Classic)

Is there any way to track how often users are logging in or accessing the apps?

See what my users have edited on their records.

Current default permissions show a new page to "everyone." Whenever I add a new page, "everyone" can see it. I would like the option to change the default permissions of all newly created pages to be something like "Show new pages to:..." and then we set "everyone" or a specific roles or multi-select or no one. This is a security risk for us if we're making new pages and the default is to show "everyone" the new page.

Allow user to filter by e.g. User > Company = Product > Company AND User > Team = Product > Team Would like both AND criteria and OR criteria

Permissions that include the concept of the unauthenticated general public. For example: Allow public users to see data but require login to edit

One user account can be assigned to more than one role

2-factor authentication for users to access their website (from a new computer, etc.)

Would love the ability to customize what the welcome/registration email looks like or the sent from email to match our company email. As of now, we are having to tell clients to add the stacker email to their contacts so it doesn't go to junk mail. IT would b great if we could have it be sent from our company email and to be able to customize the text of that welcome registration email.

It would be great if we could automatically expire password after x number of days. This would help keep the security tight, and make sure that only people who still have access to the email can access the app.

Currently on a Stacker login page >> -When a user enters an email address that is a valid user account, the login page will then say "Check your email. Click the link in the email or enter the code below." -When a user enters an email address that is not a valid user account, the login page will then say "That email address is not part of this workspace." By having these two different messages, it allows bad actors to see if an account exists. We work in the legal industry and users of our portals can be domestic violence victims. We want to protect their privacy. A suggested solution is to show the same message whether an account exists or not.