PEHLE RELAX
ESS (Staff Login) default-deny hai — leaked phone/token se koi patient data, billing, ya export nahi khul sakta; sirf us staff ki khud ki hajiri, chhutti, payslip aur assigned tasks. Lekin device 90 din trusted rehta hai (OTP skip hota hai), isliye clean-up zaroori hai:
STEPS
- People → Staff → Staff Directory → staff edit → phone number hata do ya naye SIM ka number daal do — ESS login HR record ke number se match hota hai, isliye purana device ab match hi nahi karega aur naya OTP naye number par jayega.
- Setup → Settings → Users & Security me us staff ka linked login account deactivate karo — deactivated account par ESS turant 'account deactivate hai' bol kar rok deta hai (purane tokens bhi refresh nahi ho paate).
- Settings → Action Guard → us staff ka PIN 'Re-issue' — purana PIN dead, taaki phone paane wala punch/leave na laga sake.
- Naya phone aane par: number update (agar naya ho), login reactivate, staff naye device se clinic code + mobile + OTP se login karega, aur ESS me 'Get my PIN' se apna PIN le lega.
EDGE
phone me clinic ka FULL login (owner/doctor wala) tha to ye ESS wali baat nahi — us user ka password turant reset karo aur session invalidate ke liye deactivate/reactivate.