Email Address Related Upgrades:
Introduced Email Editing: Administrators can now easily update Users' email addresses directly from the User Details page by clicking the "Edit" button next to their current email.
Added Workflow for Email Change Notification: Upon initiating the email change, the "changeUserEmail_1" workflow is triggered automatically. The End-user is notified in their old email that an email change request has been made in their account and to contact support if they did not initiate the email change request.
Added Workflow for Email Change Confirmation: Following email change request approval by Admin/Operator, newly added workflow sends an email to the new email address with an OPT URL link asking the End-user to confirm their email address. Until the new email address is confirmed through this link, the old email address remains as the only login and account address associated with the End-user’s account.
Added Workflow for Validation for Duplicates: At the time of account creation or request for email address change, added a workflow that verifies if the new email address is unique to prevent duplicates.
Record in Database: Information related to the email change request, including the old and new emails and the initiator of the request, is recorded in the database for reference.
Enhanced Security Workflow: Email validation "changeUserEmail_2" workflow validates the timestamp of email validation request before finalizing the approval and change of email in End-user account.
Email Change Confirmation Workflow: Added a workflow to send an email to the newly set email address of the End-user, confirming successful email change.
Removed API Keys from Database Storage
Description:
In the effort to increase End-users accounts and reduce risks for Admin/Operators, a change has been introduced for storage of API key and tokens.
Enhanced Security: API keys and tokens, previously stored in the database, have been removed from storage to mitigate potential security risks.
Improved Data Protection: By eliminating the storage of sensitive information such as API keys in the database, we have enhanced the overall security posture of our system.
Reduced Risk Exposure: Removing API keys from the database reduces the risk of unauthorized access or exposure of sensitive data in the event of a security breach.
Adherence to Best Practices: This update aligns with industry-standard security practices, ensuring that sensitive information is handled in a secure and responsible manner.
No Impact on Functionality: Despite this change, there is no impact on the functionality or usability of the system. API keys and tokens remain accessible and usable for authorized users and applications.
Puppeteer Admin Panel Security and Data Visibility Upgrade:
Action Tracking: With Workflows we extended the tracking of User Actions in both Audit Logs and Runtimes. This heightened transparency and level of insight ensures that administrators have a comprehensive overview of End-user actions and Admin initiated changes on the Platform.
Level Based Authorization for Admins: To further e reinforce security measures, actions initiated by Admins without appropriate permissions set for their Admin Level, require approval from another Admin who has the authority to approve requests. This task-based approval process ensures that only authorized actions are executed, minimizing the risk of unauthorized changes and enhancing overall system integrity.
UX Enhancements to Admin Panel Admin Role Management: Introduced major navigation improvements and fixed usability bugs from early version of Workflow, Admin Level and Admin Configurations section of the Admin Panel. These cosmetic and functional upgrades enhanced usability and reliability, providing Admin/Operators with an intuitive and efficient platform management experience.