| PM | Quote | Reply | Full Topic |
| Joined: | Wednesday Aug 9th, 2006 |
| Location: | Singapore |
| Posts: | 3493 |
| Status: |
Offline
|
juwi_uk wrote:
How would this work for installer managed systems where I presume normally Comfigurator or even the CCLX wouldn't be left on site at the customer's address?
But assuming they are both installed on the clients PC (as a direct comparison to WizComfort which I assume this will replace at some stage), maybe some things still need to be locked down to protect users from self harming their CCLX?
Whilst I assume they would not have the rights in their sign-in code to grant then upload of a configuration to Comfort, I am not seeing anything (tell me if I'm wrong here) that is stopping them freely switching between user and engineer mode once they've opened Comfigurator and pointed it at the CCLX file.
So what stops them from changing the config in engineer mode and saving the CCLX file ready for the installer to have a surprise next time they try to use?
I see that Comfigurator remembers the mode you were in when you last exited which is good but maybe then you should only be able to switch between user and engineer mode prompting for a sign-in code that allows administrative access if the current sign-in code is not sufficiently elevated.
Maybe even ask for the user to enter a sign-in code when the CCLX is loaded or on startup if the "Open Last File on Startup" option is checked.
IMHO of course!
Julian
There is currently no prevention of a user from switching to engineer mode
This is something under discussion at the moment, and we may need to do something about it
The Restore from backup feature does provide some measure of protection as it can restore a previous file written by the engineer.
The user can only access this if the cclx file is provided by the Installer/Engineer. This is the same situation as Wizcomfort which also requires access the to cclx file, so someone who has Wizcomfort can also use Comfigurator and do whatever he wants
Perhaps switching to Engineer Mode should require the Engineer code to be entered. However many users may want to have full control
| Close Window |