Add "Access Control" to restrict download of private key

Prior to posting check if a similar request does not already exist.
Try to give a name in the user story format (ref. https://en.wikipedia.org/wiki/User_story)
Like: As a role I can action, so that expected benefit

Q1. What is the problem that you are trying to solve?
The issue I’m trying to resolve is we have lots of passwords we use company wide and I want to create one account that is setup on shared computers with access to these passwords, but I don’t want anyone else to be able to add that account to their own computer. Most of the computers we have are shared access, so it wouldn’t be practical to have every person have their own account. This is to protect employees from being able to access them after they are no longer with the company.

Q2 - Who is impacted?
I do see this as a small use case, but I can imagine that others would make use of it.

Q3 - Why is it important and/or urgent?
This would allow for a company to control access to shared accounts.

Q4 - What is your proposed solution? (optional)
I would like another option added to the User settings section of the “Role-based access control” to be able to turn off the ability to download the private key or the recovery packet. When this is necessary the affected user can be temporarily assigned to a different role that has this ability.

2 Likes

This would be a beneficial case for the business that I work for; We have shared desktops that various users have to log into (not always accessing the same desktop) in which they have to go through the process of installing the PassBolt Extension and then “Recovering” their accounts.