Currently there is no registration allowed, so all new users must be added manually into pleak database.

1. User system with authentication using BCrypt salted password hashing function with a cost factor of 12 (2 12 iterations of the key derivation function) and HS512 (JSON Web Algorithm for HMAC using SHA-512) for JWT (JSON Web Token) signing and verification.
2. Password changing with strength check.
3. Blocking user accounts.

1. Business process modelling using the standard BPMN syntax.
   1. creating, viewing, editing, exporting, importing, renaming models in modeller.
2. Per-user server-side storage of models.
3. Models and folders in two lists - own and shared models / folders:
   1. models grouping to folders and subfolders for easier management and sharing.
   2. sorting and filtering of models and folders for easier model/folder management.
   3. Actions menu under each model to view, edit, rename, delete, move, copy, export, publish, share and open / edit models in editors (SQL-privacy / PE-BPMN / SQL Derivative Sensitivity) (options differ based on view/edit rights)
   4. Actions menu under each model to rename, delete, move, copy, share folders (options differ based on view/edit rights)
4. Exporting of models to files in the XML format (.bpmn) and also to SVG images.
5. Importing of files to models in the XML format (.bpmn).

1. Private sharing of models and folders containing models with other users (view / edit rights):
   1. if a model is shared with edit rights to user1 then the user1 will be able to:
      1. edit, rename, copy, export, share and publish the model
      2. open / edit models in editors (SQL-privacy / PE-BPMN / SQL Derivative Sensitivity)
   2. if a model is shared with view rights to user1 then the user1 will be able to:
      1. view, copy and export the model
   3. if a directory is shared with view rights to user1 then the user1 will be able to:
      1. view the directory
      2. view, copy and export models in it
   4. if a directory is shared with edit rights to user1 then the user1 will be able to:
      1. add new models into the directory
      2. share the directory
      3. edit, rename, copy, export, share and publish models in it
      4. open / edit models in editors (SQL-privacy / PE-BPMN / SQL Derivative Sensitivity)
   5. if a directory has been shared with edit rights to user1 and user1 has created models into the shared folder, the owner of the shared folder is able to:
      1. edit, rename, copy, move, delete, share and publish models in it
      2. open/edit models in editors (SQL-privacy / PE-BPMN / SQL Derivative Sensitivity)

1. Public read-only sharing of models via a URL:
   1. one at a time using the option “Publish” in Actions menu in owned and shared models tabs
   2. collection of all models in a directory all together using the option “Publish links” in Actions menu in owned and shared models tabs