Users
You need to set up individual users within groups so that they can access your diary from
www.restaurantdiary.com/login.asp - the login page for all users. Throughout our system, each user must have a unique name. You can check username availability when creating a user without submitting all data by clicking on “check availability” button.
Password generator tool allows you to generate strong password for the user. Click on Generate password link, copy password from a popup window, paste it to the password field. You can generate another password in the same window by clicking on Generate New button.
The password minimum length and
strength are determined by a password policy which is configurable on the
Security Policy
page.
If user is locked out due to exceeding maximum allowed invalid logon attempts set up by Account Lockout Policy you will see warning message at the top of the page and if you have an appropriate permission you will be able to unlock it by clicking on Unlock button.
Note that only administrator and users with the permission “Allow to unlock user account” are able to unlock user accounts.
The rights set up here are powerful
management and administration tools — if you wish to
allow hosts / hostesses
the ability to “break rules” and exceed maximum covers limits it
is
important you assign these rights here. Otherwise, the host will not be able to
click on
a grid point in the diary and be sure the booking will be allocated
directly to the table
preferred.
Groups
RD works on a hierarchy of rights for
groups and users and these should be set up before
other areas are looked
at.
Please refer to the list of options
available when you add a new group. Suggested groups
are Staff, Duty
Managers, Executives, Chefs, Concierges and Hotel Receptionists. You can provide
all the above (and any more you can think of) with different levels of
controlled access to your diary.
Password
Where such a right has been granted by the administrator, users may access the password function and change their passwords as required.
IP Addresses
It is possible to tightly control access to your system via relevant IP addresses – if you wish to use this facility please send details and appropriate request to tech@restaurantdiary.com.
Also, we can report on the IP address bookings are made from and this can be included in customised email reservation confirmations (see “Notifications”).
Session Timeout security setting determines the amount of continuous idle time that must pass before the session is suspended due to inactivity and user becomes logged out. The value must be between 5 and 1440 minutes, which is one day. The default value is 60 minutes.
Please note. If this value is greater than Diary Refresh Interval (see Settings / Interface Settings) then it will not take effect while diary page remains opened. It is recommended to set this value less than Diary Refresh Interval.
Security policy includes the following subsets:
− Password Policy. Determines settings for passwords.
− Account Lockout Policy. Determines the circumstances and length of time that an account will be locked out of the system.
Password Policy
− Password must meet complexity requirements. If this policy is enabled, passwords must meet the following minimum requirements:
§ Contain characters from three of the following four categories:
§ English uppercase characters (A through Z)
§ English lowercase characters (a through z)
§ Base 10 digits (0 through 9)
§ Nonalphanumeric characters (~, ., ,, !, @, $, #, %, ^, &, *, -, +, _, =, ?, /, |, (, ), [, ], {, }, <, >, ;, :)
Complexity requirements are enforced when passwords are changed or created.
− Enforce password history. Determines the number of unique new passwords that have to be associated with a user account before an old password can be reused. The value must be between 0 and 20 passwords.
− Minimum password length. Determines the least number of characters that a password for a user account may contain. You can set a value of between 6 and 100 characters.
Note that despite of the policy setting “Password must meet the complexity requirements” password must be at least 6 characters long.
Account Lockout Policy
− Lock out Account After. This setting determines the number of failed logon attempts that causes a user account to be locked out. A locked-out account cannot be used until it is reset by an administrator or a user with the appropriate permission or until the lockout duration for the account has expired. You can set a value between 1 and 100 failed logon attempts. If you set the value to 0, the account will never be locked out.
− Account Lockout Duration. Determines the number of minutes a locked-out account remains locked out before automatically becoming unlocked. The available range is 1 to 100 minutes. If you set the account lockout duration to 0, the account will be locked out until an administrator or a user with the appropriate permission explicitly unlocks it.
To unlock locked out user account:
1. Go to Security Settings, Users
2. Choose the user to be unlocked and click Edit link
3. If user is locked out you will see warning message at the top of the page and if you have an appropriate permission you will be able to unlock it by clicking on Unlock button.
Note that only administrator and users with the permission “Allow to unlock user account” are able to unlock user accounts.