2

Major Issue uncovered

Daniel Inzitari >

July 16, 2013 21:57

None

Follow

So, I had one of my shooters over to pick up some gear, and had him log in to his shoot Q account to show him how to view a questionnaire for shoots. What I found, is that when I "print" the dossier, it allows him to add the contract, and view it, complete with billing and financials. 

Also, ALL of my tasks for shoots, such as follow ups and the like, are completely viewable. This is a serious issue, and needs immediate attention please! ***The shooter is listed as "employee" under settings, with both the hide financials and hide correspondence checked.

• Facebook
• Twitter
• LinkedIn

17 comments

• 0
  
  Don Pope > July 17, 2013 10:54

  Not only is this a problem, but there should be greater control over by the Admin over the subaccounts.  For example, an employee may need to see his shoot and schedule but not the leads.  He may need to see his shoot, the emails associated with it but not other leads.  Right now, it is basically show him all or show him nothing.  Needs a fix.  

• 0
  
  Robert Heyman > August 09, 2013 15:19

  Quote: 

  "So, I had one of my shooters over to pick up some gear, and had him log in to his shoot Q account to show him how to view a questionnaire for shoots. What I found, is that when I "print" the dossier, it allows him to add the contract, and view it, complete with billing and financials. " 

   

  Hi Daniel, 

  He Logged into your Account, not His. 

  The first step I would recommend is to make sure your photographer clears his browser and closes his browser.

  You will want to make sure he is definitely logging into ShootQ under his account, and not yours

   He should not be able to see financials from his account. 

  Thank you, 

  Robert

• 0
  
  Daniel Inzitari > August 09, 2013 15:58

  No, he was in his account. I had him log in under his name on purpose, as I was curious as to what he could see. If you read the quote that your pasted from my original post, you can see that I specifically said that he could see the financials, meaning the cost charged to client, by checking "contracts" when printing out the client's dossier. I did NOT mean he could see the charts in the "business->Financials" section.

• 0
  
  Robert Heyman > August 09, 2013 16:25

  Hi,

   

  The browser saves the log in information for the last person that logged in in the browser's cache. Please try clearing their browser's cache or even using a different browser. I want to make sure that the photogrpaher is definitely logged in with his account.

  i will create a ticket for this issue.

   

  Thank you,

   

  Robert

• 0
  
  Daniel Inzitari > September 25, 2013 01:52

  Hi, just to confirm, this hasn't been resolved. My shooter can see this stuff from his own computer, which I've never logged in on. In addition, my shooter made a comment in passing. "Wow, you get a whole bunch of bookings from "the Knot". It accounts for almost all of your bookings!". 

  Now, he obviously didn't mean harm, but it also means he is snooping around the system, and can see my marketing data, booking info and pretty much everything else. I value my shooter's, but also don't wish to have my company marketing strategies, client communications and financial data available to associates. This is just plain bad and nothing is being done about it, so please understand my frustration. I can't envision a issue larger than this existing on this platform.

   

• 0
  
  Daniel Inzitari > September 25, 2013 01:58

  Here is a link to other users reporting issues:

  http://help.shootq.com/entries/22116233-Multiple-Roles-or-Personnel-Types-Per-Studio

• 0
  
  Ericson-Wolfe Photography > September 25, 2013 02:27

  I agree... the whole employee/shooter login is pretty much useless unless they are partners!  We don't even hand out shooter logins... they are set up for booking purposes, but we feed them manually what they need to know via email. It's a bit time consuming but ShootQ's support for non-admin logins is obviously quite underdeveloped (to put it nicely). But the other features work so well (ok, well enough) that we haven't yet found a better alternative.

• 0
  
  Don Pope > September 25, 2013 10:49

  I am now convinced that either Shootq does not read our comments or they are doing so well financially that they don't fear losing clients. How could they let a problem like this go unsolved so long?
• 0
  
  Keana Clay > September 25, 2013 20:46

  Hi Daniel,

  I completely understand your concern. Right now, additional users on an account can see a few things in Analytics like referrals and booking percentages. As it relates to sales, they can see how many packages and products have been sold, but they do not have access to view your financial information...if you have hidden that financial and billing information from them. They can't see what package A costs to calculate that selling 20 units of package A resulted in $X.  The only way that information can be see is if the user has access to your login information or has signed in as you at some point.

  Your concern will be brought our product development manager as a feature request.  We have implemented a lot of features over the past year and we will continue to do so. 

• 0
  
  Daniel Inzitari > September 25, 2013 20:53

  Hi Keena,

  I'm sorry, but you are wrong. Did anybody actually try to replicate the instructions I posted above? Jeez! 

  Log in as a "employee" with "hide financials/disable correspondence" checked. Proceed to click on any booked shoot. Proceed to click on "print" dossier at bottom left of shoot page. Proceed to select "contract" at right of page. From there, you can see exactly what client paid, and all other financial details. In addition, any shooter can see all of my marketing and other data. 

  Honestly, this is an oversight by your company. Mistakes happen, it's a good service as is, but unusable in the near future if this isn't addressed. Seriously, fix the problem instead of finding ways to downgrade the issue. Thanks.

• 0
  
  Don Pope > September 25, 2013 21:10

  Keana,

  Got into a sub account.  Click on Correspondence, then proposals.  The sub-account can clearly see the package selected and the price that the customer paid.  The "financials" are blocked but this is financial information.   I created an account to test it with.  Then I went to a computer that has NEVER been to Shootq and like magic, the sub account can see the price that the customer just paid me based on looked at the accepted proposal.  We don't need our employees watching the cash drawer.  "Billing" is gone but the financial information is in a number of other places for a booking.  

  Let's take it one step more.  If the sub-account clicks on Additional Details (Booked Package), it pulls up the package and the unit costs for that gig.  That is financial information.  I agree with Dan that this is a legitimate issue and should be met with solutions by Shootq and not with reasons why the users are using it wrong.  

  This type of issue should be treated like a 911 call to Shootq,  not as a feature request that typically takes months to solve.  This issue is several months old.  A loss of clients by Shootq over this issue is entirely preventable.  

• 0
  
  Keana Clay > September 25, 2013 21:52

  @Daniel - GROSS error on my end. I sincerely apologize. You are absolutely correct. I've relayed your concerns to our product development manager as well as what Don added.

  @Don - If Client Correspondence is disabled, the other users will not have the "Correspondence" option from the Home page.

• 0
  
  Daniel Inzitari > September 25, 2013 22:09

  Keena, 

  I have client correspondence unchecked. Sub users can still see emails and correspondence by going directly to the shoot (90% sure, can't re-check at the moment). I do know 100% that they can see all of my tasks. 

  In the end, the solution to this issue needs to be pretty simple. We need a working option to limit users to seeing only calendar, and basic shoot details. (Where to be, and when). As a bonus, it would be nice if they could see questionnaires only by our choosing, (Clients submit timelines to me this way). Still, primary concern is that they can't see  ANY DETAILS of the business marketing, correspondence, financials, or otherwise.

• 0
  
  Daniel Inzitari > October 04, 2013 22:57

  Any updates on this?

• 0
  
  Daniel Inzitari > August 27, 2014 16:34

  It's been almost a year, and this still hasn't been addressed! All of my shooters can also see all of our leads and the correspondence. Such a critical issue and no support, and I am now highly considering a painful but necessary move to another platform. Please advise the status on this, and let me know if there are any fixes in the works currently.

• 0
  
  Don Pope > August 27, 2014 17:57

  Dan, I gave up trying to get a fix to this.  This is such a critical issue and all I got was excuses and "we will relay this to our product development team".  I gave up months ago.  

• 0
  
  Daniel Inzitari > August 27, 2014 18:00

  There is a competitor (i'll leave unnamed) that has this set-up 100%. Shoot Q is the most refined system i've used, but this feature is a deal breaker, and I may not have a choose but to do the painful migration to another platform.