Changing somebody: job, login name, password, disable
Every person on The team list has five buttons. A new password is the administrator's; nobody can read the old one back.
Team & access → The team. Each row shows how the person signs in, their job, their hotels and when they last signed in.
Do this
- Job & access — opens the Add a person wizard on this login: another job, other hotels, one permission more or less. It takes effect on their next click.
- Login name — issues or changes the username they type, and which hotel's code goes with it. Anybody marked *No username yet* needs this before they can sign in with a username.
- Password — set a new temporary one (at least 8 characters) and tell them. They choose their own at their next sign-in. Their open sessions are signed out, and a lock from wrong attempts is cleared at once.
- Disable — somebody who has left. They are signed out immediately and cannot sign in; nothing they did is touched. Enable brings them back.
Email changes where they are reached. It does not change how they sign in.
- Passwords are stored as a bcrypt hash. Nothing in the system can read one back — not us, not an administrator, not the database owner.
- Anybody can change their own password from Menu → Change my password. There is no "forgot password" email yet; the administrator sets a new temporary one.
If the person locked out is the only administrator, that is the one case to telephone us about — and a good reason for a hotel group to have two.