No login forever for admins

Started by dschwab9, September 24, 2003, 09:49:07 PM

Previous topic - Next topic

dschwab9

It would be nice if the "login forever" feature didn't work for admins and global moderators.  Keeps an admin/global mod from logging in and then someone else getting on the computer and doing bad things (because he's still logged it).

[Unknown]

Administrators can still log in forever, HOWEVER, if you are an administrator (or have administrative permissions.) and have not disabled this... you must enter your password for each session of administration.

This means if you click the admin button, you must type your password to actually access the page.  Failed attempts at the password are logged with IP address and user agent. (and probably more, I forget.)

-[Unknown]

dschwab9

What about deleting/modifying posts and profiles?  The admin center is what I was really concerned about, since you can basically enter the database from there.

[Unknown]

As of current, it is not required for moderating users, but that may very well change...

-[Unknown]

klumy

Good idea, Admin or moderator should be automatically logoff after there is an inactivity for about 1 hour or so.

bostasp

For me, this would be annoying, because I go through periods of going into the admin centre, changing something, checking it, going back into the admin centre, messing with something else, checking it, going back into the admin centre....

logging in every time would kill me...

klumy

maybe this option could be setup individually for each admin or moderator in the admin center.

bostasp

Quote from: klumy on September 26, 2003, 05:13:44 PM
maybe this option could be setup individually for each admin or moderator in the admin center.

Yea, whereas it is setup for the other admin, but not myself, and for the global mods...

Peter Duggan

Quote from: klumy on September 26, 2003, 05:10:27 PM
Good idea, Admin or moderator should be automatically logoff after there is an inactivity for about 1 hour or so.

So long as it's kept optional (as suggested by [Unknown]'s first reply), I don't have a problem with it. But I'd personally hate to be logged off automatically because my home computer is normally used only by me and I hardly ever log in from work!

[Unknown]

You misunderstand!

You ARE NOT logged out.  You remain logged in.

HOWEVER, to access administrative features, you must type your password.  You just have to type it, and you keep on doing what you are doing.  It automatically focuses to the password box, and then you hit enter... it then redirects you to the link, form, etc. you clicked or submitted.  It's really fairly painless.

-[Unknown]

Seph|roth

But you can turn this off, right? Like bostasp said, it would be a real pain in the *ss if i'm testing things and returning to the admin centre about every minute...

bostasp

Quote from: [Unknown] on September 26, 2003, 11:56:57 PM
You misunderstand!

You ARE NOT logged out.  You remain logged in.

HOWEVER, to access administrative features, you must type your password.  You just have to type it, and you keep on doing what you are doing.  It automatically focuses to the password box, and then you hit enter... it then redirects you to the link, form, etc. you clicked or submitted.  It's really fairly painless.

-[Unknown]

Yea I understand that, IPB has that feature, it just would be a right pain to keep entering my password again to hit the admin centre, I know its more security-carefull, it woulld just be a pain for a few of us

Spaceman-Spiff

Quote from: Seph|roth on September 27, 2003, 05:22:02 AM
But you can turn this off, right? Like bostasp said, it would be a real pain in the *ss if i'm testing things and returning to the admin centre about every minute...
unknown said, you'll have to type your password to go to the admin section for every session
so as long as you don't close your browser or wait too long till your session expire, you'll be fine

[Unknown]

It's NOTHING LIKE how Invision and phpBB do it, and YES it turns off.

-[Unknown]

Advertisement: