From 73a91ef916acc924c9f8fc7f67e4d3aa23af1f93 Mon Sep 17 00:00:00 2001
From: Cam Proudlock <cam.proudlock@gmail.com>
Date: Mon, 31 Aug 2026 13:24:24 -0400
Subject: [PATCH] Correct the remote-access scheme documentation

---
 .../computers/frontend/views/AccessProtocolsList.vue |  2 +-
 plugins/computers/plugin.py                          | 12 +++++++++---
 2 files changed, 10 insertions(+), 4 deletions(-)

diff --git a/plugins/computers/frontend/views/AccessProtocolsList.vue b/plugins/computers/frontend/views/AccessProtocolsList.vue
index 016b9675..13711685 100644
--- a/plugins/computers/frontend/views/AccessProtocolsList.vue
+++ b/plugins/computers/frontend/views/AccessProtocolsList.vue
@@ -69,7 +69,7 @@
           </label>
           <label class="field">
             <span>Link template</span>
-            <input v-model="form.linktemplate" type="text" maxlength="255" placeholder="vnc://{host}:{port}" />
+            <input v-model="form.linktemplate" type="text" maxlength="255" placeholder="scheme://{host}:{port}" />
             <small class="muted">Placeholders: <code>{host}</code>, <code>{port}</code>, <code>{scheme}</code></small>
           </label>
           <label class="field checkbox">
diff --git a/plugins/computers/plugin.py b/plugins/computers/plugin.py
index 3e6ed2ab..30863bff 100644
--- a/plugins/computers/plugin.py
+++ b/plugins/computers/plugin.py
@@ -2020,9 +2020,15 @@ class ComputersPlugin(BasePlugin):
         KNOWN GAP, tracked separately. The computer serializer is
         BaseModel.to_dict(), so it publishes every column - serialnumber, the
         Azure device and object ids - and the detail route resolves
-        accessmethods into working rdp:// and vnc:// links plus the full
-        Communication row. A guest granted this gets all of it, on the LIST
-        route as well, so it is one request rather than one per asset.
+        accessmethods into launch links, each built from that protocol's own
+        linktemplate, plus the full Communication row. A guest granted this
+        gets all of it, on the LIST route as well, so it is one request rather
+        than one per asset.
+
+        Do not name schemes here. The templates are site-editable rows in
+        accessprotocols, so what a link looks like is data, not a constant -
+        the shipped VNC row is com.realvnc.vncviewer.connect://, not vnc://,
+        and an earlier version of this docstring said otherwise for months.
 
         The fix is a field allowlist on Computer.to_dict() plus suppressing the
         resolved links unless the caller holds a remote-access permission. Do