System Updates

Minor updates and code changes occur every day. Only significant or noteworthy updates are shown here. Updates shown with a gold background are (or were at the time) only available to Advanced HOPS members.

Recent HOPS Updates Recent Retail System Updates Future Updates Search

Time Date	System Updates
Update 1166 30 April 2025	RESETTING PERSONAL QUESTIONS A new button has been provided in the user profile page for managers to reset users' Personal Questions. This removes the need for Admins to raise a support request to have questions reset. Where a user works for more than one railway, their accounts are separated out before the Personal Questions are removed. They then have separate login credentials for each railway. Their password and Personal Questions will all happen to be identical to their current ones, but they will have a separate username for each. The Personal Questions are only removed from the account that is used for the railway that has made the requests. The user can then use the Forgotten Password facility, or the manager can 'Issue Password Reset' [does the same thing] and the user will be able to reset their password without needing to answer the Personal Questions. The user will need to follow the same process on the other railways they work at to re-gain access to those. The user can re-join their accounts together again once they have re-gained access to both. This accounts are split out to avoid a rogue Admin obtaining access to a user's account by means of changing their email address and obtaining a password reset, and then being actually logged in as the user and jumping to the user's other railways. By separating out the accounts, the rogue Admin can only obtain access to their own railway's data, which they had access to anyway. (Note this is the same process as has always applied, just previously it has been implemented by HOPS HQ rather than railway admins.) Admins should never be /actually/ logged in as other users. It is very bad practice to ask users to reveal their passwords. Admins should use the Admin-Login facility. The admin login facility does not allow jumping between railways.

Time Date

System Updates

Update 1166
30 April 2025

RESETTING PERSONAL QUESTIONS

A new button has been provided in the user profile page for managers to reset users' Personal Questions. This removes the need for Admins to raise a support request to have questions reset.

Where a user works for more than one railway, their accounts are separated out before the Personal Questions are removed. They then have separate login credentials for each railway. Their password and Personal Questions will all happen to be identical to their current ones, but they will have a separate username for each. The Personal Questions are only removed from the account that is used for the railway that has made the requests. The user can then use the Forgotten Password facility, or the manager can 'Issue Password Reset' [does the same thing] and the user will be able to reset their password without needing to answer the Personal Questions.

The user will need to follow the same process on the other railways they work at to re-gain access to those. The user can re-join their accounts together again once they have re-gained access to both.

This accounts are split out to avoid a rogue Admin obtaining access to a user's account by means of changing their email address and obtaining a password reset, and then being actually logged in as the user and jumping to the user's other railways. By separating out the accounts, the rogue Admin can only obtain access to their own railway's data, which they had access to anyway. (Note this is the same process as has always applied, just previously it has been implemented by HOPS HQ rather than railway admins.)

Admins should never be /actually/ logged in as other users. It is very bad practice to ask users to reveal their passwords. Admins should use the Admin-Login facility. The admin login facility does not allow jumping between railways.

Generated at 18:21:35, 21 May 2025