-
Notifications
You must be signed in to change notification settings - Fork 448
Security
ChurchCRM should only run on HTTPS connections.
If you don't have an SSL certificate for your domain, Lets Encrypt provides free SSL certificates that may fit your needs
Any "Person" in ChurchCRM may be promoted to a "User." By default, a "Person" in ChurchCRM is not allowed to log into the system until an administrator provisions them with a user account.
ChurchCRM contains many roles to control access to your church's sensitive data:
In addition to the above roles, the following actions are controlled granularly "Per-User":
###bEmailMailto
###sMailtoDelimiter
###bCreateDirectory
###bExportCSV
###bUSAddressVerification
###bAddEvent
Security is currently handled by $_SESSION variables. If a user has been assigned a given role, the name of that role will be present as a key in the $_SESSION array.
if($_SESSION['bAdmin'])
{
#This user has been assigned the Admin role
}