A funny person in my company, just found a breach in the sistem and is enjoy testing it.
Here is the situation, I grant the possibilitie for all end user to change their data, name, e-mail and so on....
The problem is it can be change with another users or agent data!
Someone I making request with another persons name.
How can i manage this?
There is the possibilitie to return an error when someone try to change is personal data for someone already in the system?
Can you please attach some printscreens and explanations on how your end users can do that?
In the end user portal there is a "change your settings" link, which changes your own settings. How can you change someone else's user information?
P.S: If you want to, you can deny your end users this option. To do that please uncheck "Enable End User to change settings" under Preferences > End User Portal.
SysAid Technologies Ltd.
Toll-Free phone center (U.S.): 1-800-686-7047
Offices - U.S.617-231-0124
Israel:+972-3-533-3675
Email:helpdesk@sysaid.com
Optimized by SEO Israel
SysAid logos and other SysAid Technologies marks
are trademarks or registered trademarks of
SysAid Technologies Ltd.
All Rights Reserved by SysAid Technologies Ltd.
2002-2011
Live Support Hours
07:00 AM - 09:30 PM (UK)
03:00 AM - 05:30 PM (EDT)
We provide worldwide services, and we do our best
to match the working times of customers from
different time zones.
SysAid Help Desk Software and Asset Management Software