Security
- Four-eyes approval can no longer be bypassed by one administrator. With the option on, these changes now also wait for a second user:
- creating a user who can approve (Administrator, Backup operator);
- giving a user more rights, or enabling such a user again;
- resetting the password or two-factor sign-in of such a user;
- changing LDAP sign-in or single sign-on (they decide the roles of directory users);
- disabling a backup job.
- Only accounts that existed before a request can decide it, so an account created for the purpose does not help.
- While the option is on, the last two enabled administrators cannot be deleted, disabled or given a lower role. The settings page warns when fewer than two administrators remain.
- Requests hold passwords only as hashes, and LDAP and single sign-on settings encrypted with the console's secrets key.
See Documentation → Users, roles & LDAP → Four-eyes approval.
Releases are signed with the BackupZit release key; consoles verify them before installing.
