Terminating User Session When User Permissions Are Changed


Summary:   

As of InvoiceReady version 9.70.0.0, whenever a user accounts permissions are changed any active sessions of that user will be terminated. Sessions are also terminated if the user account is locked out of use or if the user’s password is changed.

Instructions:

Changes to a Single User Account

When a change applies to a specific user account, all sessions of that user account are immediately terminated. Any unsaved changes made by that user at the time of session termination will be lost.

If a user has multiple active sessions and they change their password, they will be logged out of all sessions and are required to log in again using the new password.

A white background with black textDescription automatically generated

Image: example message received upon saving changes to a user account.

If a main user changes a user’s password or permissions via the user management page, upon saving the changes made a warning will be displayed to inform the main user that the action will terminate sessions of the user account being changed. It is recommended to ensure that the subject of such changes is informed beforehand so as to avoid loss of effort due to unexpected session termination.

 

Changes to a User Profile

User profiles are a way to define permissions to a group of users in a collective fashion. When a user profile is changed, all user accounts that have been assigned that user profile will have their active sessions terminated. Any unsaved changes made by each of the users at the time of session termination will be lost.

Image: example message received upon saving changes to a user profile.

If a main user changes a user profile in a way that removes any permissions, upon saving the changes made a warning will be displayed to inform the main user that the action will terminate sessions of all user accounts associated with the user profile. It is recommended to ensure that the subjects of such changes are informed beforehand so as to avoid loss of effort due to unexpected session termination.