Recent searches


No recent searches

HC Security settings



Posted Jun 07, 2022

 

Separate security settings for Help Centre and Web Widget

Feature Request Summary: 

Within the Zendesk admin centre, there is an option for 'Anybody can submit tickets', with this disabled the web widget becomes unavailable for registered users and unregistered users. This function also disables the signup form on the Help Centre. 

It would make sense to have this split out slightly and in an ideal world it would look like this: 

  • Registered users can still use the web widget and submit tickets 
  • Sign up form is disabled from Help Centre 
  • Registering a user is done by an agent 

OR - Have an option where, if someone signed up to the Help Centre, it would require approval from an agent prior to their account becoming active. This would ensure the end-user enrolment was monitored, currently there is no alerting in place to indicating someone has registered for an account on the Help Centre 

 

Description/Use Cases: 

Our business model requires us to provide documentation to our customers, in most cases this is confidential documentation and we'd like to use the HC to facilitate this. With the current limitations within the ZD admin centre, we either have to disable the web widget to allow us to lockdown our help centre or allow everyone to register for our help centre. As you can imagine, this poses a risk to us. Preferably, the 'Anybody can submit tickets' should only directly relate to whether a user is registered or not by an agent, or self-sufficient. 

The business impact of limitation or missing feature:

Risk to exposure of confidential documentation stored on Help Centre - Lack of communication options through ZD when the option is disabled, no oversight of newly registered users unless you manually check through the end-users list. 

Hope this makes sense 

 

Additionally: this ZD ticket ( #10460689) can be viewed for additional context and information if and when required. Also, feel free to reach out and I'd happily demonstrate my logic above. 


3

1

1 comment

We, too, struggle with this issue.
I don't know where it got in, but it registers an account without my permission.
We feel that this is a security issue, although it does no real harm to us.
We asked ZD to investigate, but they said that there are no old logs, and even the most recent logs are limited in their ability to track, so we have no idea where they got into the system.

0


Please sign in to leave a comment.

Didn't find what you're looking for?

New post