The “Security” tab of the Project Settings section allows system owners to manage the general security and access settings, such as protection of the data and section access via password setup, setting the duration of the active user session, managing the Two-Factor authentication, etc.
Note: These settings are available for the system owner only.
As a system owner, you can enhance security by setting an additional password for specific functionality or pages. This ensures that sensitive data is only accessible after an extra layer of authentication. For example, when a user attempts to access the protected page, the system will prompt them to enter the additional password. Only after entering the correct password will the page become accessible.
To view these settings, go to the System Management > General > Project Settings section, select the “General” tab, and navigate to the “Security” sub-tab.
The section contains two blocks.
The “Protected Access and Session Duration” block allows you to set the data access protection via the password and the time of the active user session duration.
The following settings are available:
- Super Passwords: The settings allow you to set the data protection via password entry. You can protect the data viewing and its modification for the following data types:
- Product Password: Enter the password for the ongoing Product status and name modifications in the Products List section. The password will be required for the name change in the “Edit” pop-up window, and disabling the Product by clicking the “Disable” button in the “Actions” column. Read more information about the Products List section in the following Knowledge Base article.
To set the password protection for the particular data or section viewing, click the “Change” button, enter the corresponding password in the “New Password” field, confirm the entered password in the “Repeat New Password” field of the “Change” pop-up window, and click the “Save” button to complete the settings.
-
- Session Duration: Select the time for the session duration in the system for all users (0.5 hour, 1 hour, 2 hours, 4 hours, 8 hours, 10 hours, 24 hours).
The “Mandatory Two-Factor Authentication” block contains settings for the Two-Factor Authentication (2FA) appliance, such as the mandatory use of 2FA, account deactivation after the defined time period without the 2FA set, and the groups of users that must have the 2FA set.
The following settings are available:
- Enable Mandatory 2FA: Check the box to enable the mandatory two-factor authentication.
- Deactivate accounts without 2FA after: Select the amount of time given for 2FA set up before account deactivation (7 days, 14 days, 30 days, 90 days).
- Affected User Groups: Select the user groups to require the setup of 2FA (Buyer, Publisher, Employees, Buyer Accountant). Default selections can be removed, and additional user groups can be added by clicking on the search box.
Click the “Save” button to complete the settings.