Admin 2 Login in as user

Developer Networks
Developer Networks
@developer-networks
8 years ago
566 posts
The Administrator should be able to log in as any user and experience that users permissions.

The Administrator should be able to exit as user and return to administrator account permissions.

When the administrator is logged in as user, The administrator if edits or posts should be that user.

I can think of a lot of reasons why this is useful and other software uses this concept for website administration.


updated by @developer-networks: 11/26/16 05:29:04PM
paul
@paul
8 years ago
4,332 posts
To do that, the 'actual' password of the user would need to be known, ie. stored withing the system. This would compromise site and user security.
If a user reports an issue that requires an admin to log in as him, he should give the admin his password (then change it after the issue is resolved).
hth


--
Paul Asher - JR Developer and System Import Specialist
Developer Networks
Developer Networks
@developer-networks
8 years ago
566 posts
Wait a second, thats not as bad as a security threat as passing passwords via email and chat windows. It would make more sense to allow the super admin to just click on view as user.... The super Admin has database privlages and can pretty much change anything in the system including the password. I am using ***** for billing which is an industry leading billing system.

In any support situation it allows me to log in as the users account and see the website as they experience it... With jamroom having many quotas and privileges it makes sense to provide this industry leading functionality to empower your admins to provide faster support. Rather then passing along a password in email or chat I suggested allowing the Super Admins the ability to ghost as the users account to resolve support issues or ?
updated by @developer-networks: 08/24/16 01:38:08AM
paul
@paul
8 years ago
4,332 posts
I wasn't suggesting passing passwords on public forums and chats. It would be done more securely, of course!!
Actually, in Jamroom, if an admin visits a profile, he does assume the profile identity.


--
Paul Asher - JR Developer and System Import Specialist
jimmyk
jimmyk
@jimmy
8 years ago
514 posts
What @developer-networks is suggesting is something which is standard in Invision Power Board. In the admin area I can click on a button and login as a user. I will admit, it has been useful in the past to assume a user level to see what the user is experiencing.
Strumelia
Strumelia
@strumelia
8 years ago
3,603 posts
What's wrong with just logging in as a test user- a profile that is created for that purpose (to see what a non-admin user might be experiencing). If the purpose is to adjust a member's settings or manipulate their content, well, admins can do that anyway without logging in 'as' them.


--
...just another satisfied Jamroom customer.
Migrated from Ning to Jamroom June 2015
jimmyk
jimmyk
@jimmy
8 years ago
514 posts
Strumelia:
What's wrong with just logging in as a test user- a profile that is created for that purpose (to see what a non-admin user might be experiencing). If the purpose is to adjust a member's settings or manipulate their content, well, admins can do that anyway without logging in 'as' them.

While what you're saying is valid, there is something about being able to login as the actual user to check out an issue. I've had instances on IPB where I had to login as the actual user so that I could determine that their settings were wrong which was giving them an error.

I can be very frustrating if an admin is trying to troubleshoot an issue, going back and forth with a user about an issue, with a user who might not be able to communicate the actual issue. It's a lot easier just to login as the user, take a look around, and solve the problem versus 10 support tickets, emails, and a large amount of time trying to figure out what exactly is happening with the users account.
brian
@brian
8 years ago
10,148 posts
I can see how this would be a good idea, but it's not something easily added to JR. For now you would just want to create a login account you can login and check on.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net

Tags