IP Limitation

Passwords alone do not stop a stolen login being used from anywhere. This module lets the administrator attach a list of allowed IP addresses to each user. At sign-in the system compares the caller's address with the list and refuses the login if it is not there. Users with no list keep unrestricted access. It suits companies that want staff to connect only from the office or known networks.

1. 1

   Create IP records

   The administrator creates IP address records with a name field holding the address. Each record is reusable by several users. A validation checks that the value is a proper address.

   • Field: IP Address
   • Reusable records
   • Address validation
2. 2

   Assign IPs to a user

   On the user form a new IP Address field accepts several records. The administrator adds the allowed addresses for that person. The list is saved with the user.

   • Form: Users
   • Many IP addresses
   • Empty list = no limit
3. 3

   Check at login

   When the user submits credentials the system reads the remote address of the request. If the user has a list and the address is not in it, the login stops with the message IP Address not allowed. Otherwise the normal password check continues.

   • Message: IP Address not allowed
   • Password check afterwards
   • Applies to every login
4. 4

   Adjust access

   To move a person to a new place the administrator adds the new address or clears the list. The change takes effect at the next login. Existing sessions are not the target of the check.

   • Add or clear addresses
   • Effective at next login
   • Administrator task

Back to version applications