A more secure procedure to create new operators is now available. In this new procedure, the creator operator won't set the password of the created operator. Instead, the created operator will receive an email with a link to set his password. SecuTix strongly recommends to use this new, safer procedure.
Solution
Creating a new operator
When an administrator creates a new operator, he won't enter any initial password anymore. However, he will need to enter the new operator's email address. He may select the template of the email to be sent to the new operator, if several such templates have been defined (see Getting started section).
Immediately after operator creation, the new operator will receive following email:
By clicking on the link, the newly created operator may set his password:
Once he has set his password, he will be automatically logged in.
Logging in while setting the password for the first time
The reset password email is sent immediately after the new operator is created. However, the new operator cannot log in immediately since the administrator has to assign the operator to a role and set the operator in running state. He should therefore wait a bit before clicking on the link. Note that resetting the password immediately isn't an issue. Simply, the operator won't be able to log in.
More precisely, the warning above will be displayed in following cases:
- The invoicing method of an organisation is changed from never to any other mode
- The invoicing method of a sales channel is changed from never to any other mode
- A sales channel with an invoicing method other than never is updated (no matter which data has been updated)
- A sales channel with an invoicing method other than never is re-validated (i.e. made visible again in the list of sales channels)
Since this is only a warning, the organisation or sales channel will still be updated according to operator's action.
Display an error when trying to activate a sales channel without defined invoice document
When the operator tries to activate a suspended sales channel with an invoicing method other than never (and no invoice document is defined), the following error message is displayed (the sales channel remains suspended):
Display an error when trying to delete or invalidate the single remaining order invoice document
When the operator tries to delete or invalidate the single remaining order invoice document, the following error message is displayed (and the document remains active):
Invoice document at organisation or sales channel level
You can define the scope of the created documents:
Indeed, a document may be valid for all organisations within your institution, for a subset of organisations, or for a subset of sales channels. The checks mentioned above always take into account the organisation. For example, when you change the invoicing method of a given sales channel, SecuTix will check that an invoice document is valid for the organisation responsible of that sales channel.
However, you may configure SecuTix to perform these checks at sales channel level. For example, when you change the invoicing method of a given sales channel, SecuTix will check that an invoice document is valid for that sales channel (or for all sales channels). See Getting started section for more detail.
Getting started
Please send a request to our service team to enable this new operator creation process. The service team will set the institution parameter Op Secured Password Creation to true.