Large number of security changes
Incident
Report for ShipHero
Resolved
Heads up: permissions were tightened. If someone is seeing missing pages, blocked actions, or can’t switch into a client account, it’s almost certainly a permissions gap, not a bug. Admins can fix it in two places:
1. Grant permissions via Roles
Go to Users & Roles → Roles tab. Either edit the role the person already has, or click Create Role, pick an existing role as the template in the Role Type dropdown, adjust the permissions, and assign the user under Add User/s. Note that users can hold multiple roles, and when roles conflict the one granting access wins, so adding a role is often the quickest fix.
2. Assign clients to the person
Non-admin 3PL users can only switch into customer accounts assigned to them. Go to Users & Roles, open the user, scroll to the Customers section, check each client they need, and save. To add the same clients to several users at once, use the Assign Customers bulk action on the Users & Roles page (this only adds access; removing a client still has to be done per user). New clients also need to be added here before a non-admin can see them.
We appreciate your understanding as we make rapid changes to stay ahead in the current AI driven cyber-threat environment.
1. Grant permissions via Roles
Go to Users & Roles → Roles tab. Either edit the role the person already has, or click Create Role, pick an existing role as the template in the Role Type dropdown, adjust the permissions, and assign the user under Add User/s. Note that users can hold multiple roles, and when roles conflict the one granting access wins, so adding a role is often the quickest fix.
2. Assign clients to the person
Non-admin 3PL users can only switch into customer accounts assigned to them. Go to Users & Roles, open the user, scroll to the Customers section, check each client they need, and save. To add the same clients to several users at once, use the Assign Customers bulk action on the Users & Roles page (this only adds access; removing a client still has to be done per user). New clients also need to be added here before a non-admin can see them.
We appreciate your understanding as we make rapid changes to stay ahead in the current AI driven cyber-threat environment.
This incident affected: ShipHero Dashboard.
.svg)
.svg){kind=logo}
