People, roles and signing in

Explains: D-AUTH-02, D-AUTH-03, D-AUTH-05, D-PROD-07, D-AUTH-09, D-DIST-18, D-020-28, specs/010-tenant-roles#req-001, specs/010-tenant-roles#req-007, specs/010-tenant-roles#req-010, specs/010-tenant-roles#req-011, specs/010-tenant-roles#req-012, specs/010-tenant-roles#req-013, specs/015-login-hardening#req-003, specs/015-login-hardening#req-004

Your shop is your company's own space in ClickFactor: its customers, campaigns, feeds, publishers, people and Activity. Some screens call it your tenant; it is the same thing. Nothing in another shop can be seen from yours, and only ClickFactor's own staff see every shop: a record that belongs to another shop answers "not found", exactly like one that does not exist (specs/010 REQ-007).

The three roles

Every person has one of three fixed roles; there are no custom roles (D-AUTH-02). The console shows them as Super admin, Tenant admin and Operator.

Operator

Runs the shop's work: customers, campaigns, feeds and publishers, including every money setting — prices, margins and budgets (specs/010 REQ-010). An operator cannot add or disable people, rename the shop, stop redirection, or create a shop. Under Admin an operator sees only Activity.

Tenant admin

Everything an operator can do, plus the people in their own shop: listing them, adding them, and disabling them, as a Tenant admin or an Operator but never a Super admin (D-AUTH-02). A tenant admin can rename the shop (D-AUTH-03) and is one of the two roles that may stop and resume redirection, except a stop ClickFactor made, which only ClickFactor resumes (D-DIST-18, D-020-28).

Super admin

ClickFactor's own staff. A super admin creates shops, each with its first tenant admin, and can work in any shop by choosing it from the session chip (D-AUTH-02, D-AUTH-03).

A price above $5.00 asks to be confirmed

Whatever your role, setting a price per click above $5.00 asks you to confirm it first; exactly $5.00 does not ask (D-AUTH-09).

Adding and disabling people

People lists everyone in the shop. A new person needs a name, an email address as their login, a password that passes the strength meter, a role and a shop (specs/010 REQ-001). An email address that another person already uses is refused.

A person is active or disabled, and nobody is ever deleted (D-PROD-07): disabling keeps their name on everything they did. Disable and Enable are on their row. You cannot disable yourself.

Resetting a password and changing a role

A tenant admin or a super admin can set a temporary password for a person from People. ClickFactor sends no email: you tell the person the temporary password yourself. It must meet the same rule as any password, and a tenant admin cannot reset a super admin's. Every session the person had open ends, and the next time they sign in they must choose a new password before the console opens. Activity records who reset whose password, never the password (specs/010 REQ-011).

Anyone can change their own password with their current one and a new one. The browser they change it from stays signed in and every other session ends; a wrong current password changes nothing and counts as a failed sign-in (specs/010 REQ-012).

A tenant admin or a super admin can switch a person between Operator and Tenant admin. The person's open sessions end and the new role applies when they next sign in. A shop always keeps at least one active tenant admin: the last one can be neither made an operator nor disabled, and the console asks you to make someone else a tenant admin first (specs/010 REQ-013).

Signing in

You sign in with your email address and password (D-AUTH-05). A failed sign-in never says whether the account exists (specs/015 REQ-004). After too many failed attempts the sign-in screen says "Too many sign-in attempts" and roughly how long to wait. The wait ends on its own, with nothing for an administrator to unlock (specs/015 REQ-003).