ORALZY
FAQ

Staff ka phone kho gaya jisme Staff Login (ESS) chalu tha — kitna risk hai?

Risk seemit hai — ESS session sirf us staff ki apni attendance/leave/payslip/tasks tak pahunch sakta hai, patient ya billing data bilkul nahi. Phir bhi: staff ka number HR record se hatao/badlo, linked login deactivate karo aur PIN re-issue kar do.

Where in ORALZY: People → Staff → Staff Directory (phone) + Setup → Settings → Users & Security / Action Guard

PEHLE RELAX

ESS (Staff Login) default-deny hai — leaked phone/token se koi patient data, billing, ya export nahi khul sakta; sirf us staff ki khud ki hajiri, chhutti, payslip aur assigned tasks. Lekin device 90 din trusted rehta hai (OTP skip hota hai), isliye clean-up zaroori hai:

STEPS

  1. People → Staff → Staff Directory → staff edit → phone number hata do ya naye SIM ka number daal do — ESS login HR record ke number se match hota hai, isliye purana device ab match hi nahi karega aur naya OTP naye number par jayega.
  2. Setup → Settings → Users & Security me us staff ka linked login account deactivate karo — deactivated account par ESS turant 'account deactivate hai' bol kar rok deta hai (purane tokens bhi refresh nahi ho paate).
  3. Settings → Action Guard → us staff ka PIN 'Re-issue' — purana PIN dead, taaki phone paane wala punch/leave na laga sake.
  4. Naya phone aane par: number update (agar naya ho), login reactivate, staff naye device se clinic code + mobile + OTP se login karega, aur ESS me '📱 Is phone ko jodo' karke naye phone ko dobara jod lega (fingerprint punch ke liye). Attendance ke liye koi PIN nahi chahiye.

EDGE

phone me clinic ka FULL login (owner/doctor wala) tha to ye ESS wali baat nahi — us user ka password turant reset karo aur session invalidate ke liye deactivate/reactivate.

Quick steps

  1. Staff Directory me staff ka phone number hatao ya naya daalo
  2. Users & Security me linked login deactivate karo
  3. 🚨 HR Masters → Staff Faces me us staff ka JUDA HUA PHONE hatao — warna khoya phone fingerprint se punch laga sakta hai
  4. Action Guard se PIN re-issue karo (purana dead) — sirf sensitive actions ke liye
  5. Naya phone aane par login reactivate + naye device se OTP login
  6. Naye phone par staff khud ESS me 'Is phone ko jodo' kare

phone lostessstaff logindevice trustdeactivatepinotpsecuritymobilerisk