Limit staff from connecting using the Desktop Application

[Thijs]

Hi,

I would like to know if there is any way I can limit staffmembers from connecting using the desktop application.

I can't limit on IP, that's really not doable because I will block the whole helpdesk on their IP.. and that is not what we want.

Or can I block the desktop application sitewide ?

[Jamie Edwards]

Hi Thijs,

Unfortunatly this isn't possible. The best you can do is remove the staff user's permissions to the coresponding live chat departments you have configured. However, they will still be able to track visitors.

[craigbrass]

Actually, its very easy to do.

Open /winnapp/index.php and find :-

	$staffid = $staffauth->authenticate(urldecode($_REQUEST["username"]), strtolower($_REQUEST["password"]), false, false);

Below, add :-

	$listofauthorizedusers = array('username1','username2');
	if (!in_array($_REQUEST["username"], $listofauthorizedusers)) {
		die('You are not authorized to use the windows application.');
	}

Just list the usernames in that array.

[Thijs]

Hi Craig,

Thanks for the nice addon.

So far I'm getting this error on users that I allow to connect:

01/02/2008 16:52:18	Trying to log into account "Accountname" with status 'Online' with URL: https://domainname.tld/
01/02/2008 16:52:18	A communication with the server has failed. Details: 
01/02/2008 16:52:18	An error occurred while attempting to communicate with the server (online 00:00):
 
 Received unexpected response from server (invalid header)!
 
 Data: (You are not authorized to use the windows application.)
 
 Error: <No extended error information available>

I'm checking what it can be, no solution yet.

[craigbrass]

Thats the error non-authorized staff are supposed to get. You need to add all authorized staff to that list above (the array). You add usernames and they are case sensitive.

[Thijs]

Yes it should be, strange is that I get it on users that I accept too...

[craigbrass]

Odd, just tried it again and works fine for me. Feel free to PM me the exact code you are using (ie with usernames) so I can check everything is as it should be.

[Thijs]

What revision of that index file do you run ?

I'm on 3.11.01 with revision 1.16 for that file.

[craigbrass]

Yes, same as me.

[Thijs]

Originally Posted by craigbrass

Yes, same as me.

I places the code you gave me above exactly under the line you gave first.

Should be as you said and should work as far as I can see.

[craigbrass]

If you wanna email me some details (ftp and admin) I can take a look for you if you like and do a bit of testing. I cannot see how it doesn't work as it works fine for me.

[Thijs]

OK, I solved it bugtracing everytjing using print_r()

The problem is that I has - between the usernames in my testsetup.

They are converted to %2D and don't match in a clear text way

Thanks !

[craigbrass]

Ah, great, glad you got it sorted.