EmilyTapestrySupport Posted December 10, 2018 Posted December 10, 2018 A great feature on the iOS app is the ability to login and add observations whilst the device you're using to access the Tapestry app is offline. This works by authenticating PIN logins that have already been enabled on the device whilst you have connection. As such, it's not possible to login with an email and password whilst offline. Before you enable this on your account, we suggest settings think about the benefit of offline access vs the additional risks. It's important to note a few things that could happen with offline access: A user might be able to see information even though their account has been deactivated. This is because the offline app may not received the deactivation notice. A user’s PIN code may be guessed, because the offline app cannot report incorrect guesses to our servers. Offline access will need to be permitted by a manager from the User Permissions section of the Control Panel. It can be permitted for everyone, or for just certain users. Please note that user permissions for managers are always enabled. Therefore, if you have several manager users on your Tapestry account, it would be worth discussing if and how you will use offline mode. For more information about data protection with the offline version, you can read this article. Once it's been permitted by the setting/school from the Control Panel, each user will also have to give their permission to enable offline access on each device they use. This is because users may not want to enable offline observations on every device they use. For instance, they may not wish to enable it on a tablet that they temporarily borrow from a colleague. If you have already given permission on the browser, you can skip to the section on enabling offline mode on the app by clicking here. To permit offline observations, a manager will need to log in to the browser version of Tapestry and navigate to the Control Panel (1). Then, select 'User Permissions' (2) from the left-hand side menu, go to the 'Staff' tab (3) and click on 'Users' to expand it (4). Once you expand this permission, you will then need to click on the 'Edit' (3) button to make changes. You'll then get a pop-up box from which you can set a default for all staff (1) or if you want to only allow some staff access to this option, you'll need to tick the 'Set different permissions for some users' (2) box. This will then give you the option of showing users that aren't currently active (3) and you'll get a list of all staff on your account (remember you can't set permissions for managers, so you won't see them here). For each member of staff you can leave them set as the default or you can set it to permitted or not permitted (4), depending on what you have set the default as. Once you're done, you just need to remember to save (5). So, you've now set up the permissions for staff, which means anyone you have allowed access to the offline mode can now enable it on the device they use to access the app. To do this, they'll need to login to the new app and select where it says 'You' (1) from the menu at the bottom of the screen and tap 'Enable Offline Observations On This Device' (2). On the next screen you will see the 'Permission from You' section highlighted, showing you this is the action that needs to be taken. You just need to slide the toggle across so it shows as green and enabled. After you slide the toggle across to enable the offline mode so it shows as green (1), you will then be prompted to save your 4-digit PIN to this device (2). This is so that when you login when offline, your PIN is saved securely on the device and the PIN you enter when logging in can be compared to this. The reason this is necessary is because when offline, the app can't access our servers, which it would normally use to check if the correct PIN has been entered to login. You won't be able to select 'Done' on this page until you enter your PIN here. Once you enter your PIN you can then save this (1) or if you realise you entered it incorrectly, you can click on the 'x' button (2) to clear this and then re-enter your correct PIN. This is what the screen will look like if you have enabled the permission from you and also entered your PIN and saved this. You've now got the new offline mode enabled! This means if your device goes offline, any observations you add will be queued up so they can be uploaded when you go back online and login to your account. One important thing to note about the offline mode is that you will, at some point, need to go back online and login to ensure the work you save whilst offline does get uploaded. On the 'You' page it shows you the next time you need to go online. Also, with the offline mode enabled, the app will always start out offline even if there is an internet connection. It will then check for a connection in the background, so you may briefly see a 'working offline' message even if you see your device is connected to the internet. So now with this enabled, if you are not connected to the internet, on the observations list it will tell you that you are working offline (1) and if you try to add an observation, it will show you this has been queued to be added (2). This will happen when you login and have a strong enough internet connection. What happens if you have the offline mode enabled and you change your PIN? As I mentioned earlier in the tutorial, to use the offline mode you need to save your PIN on your device (because when your device is offline the app can't connect to our servers and it needs something to compare the PIN you enter when logging in with to ensure it is correct). If you then change your PIN there are a few different scenarios that might happen, which I have laid out below for you. Your device is offline and you enter the new PIN: the app will not let you in. This is because it is offline and has no way of knowing that you changed your PIN. If you keep trying you will eventually get the brute force lockout. Your device is offline and you enter the old PIN: the app will allow you in. This is because it is offline and has no way of knowing that you changed your PIN. If you later go online while logged in, the app will check the PIN with the server and discover it is wrong, and kick you out to the lock screen. Your device is online and you enter the new PIN: the app will let you login. As the device is online, the app has access to our server, so it will check the new PIN against it and the server will reply saying it is correct. The app will also update the PIN it has stored offline. Your device is online and you enter the old PIN: the app will briefly allow you in, so you will momentarily see the observation list. It will then check with the server, see the PIN is wrong and you'll be taken back to the lock screen. The reason you are initially logged in is because if you have set up offline access, the app will check the offline PIN matches first. If it does, it will let you in before making any attempt to contact the Tapestry server. We hope you find this new offline mode helpful! Please do remember to consider the security risks involved with this before enabling it for staff and on any devices. If you have any questions or feedback about the new iOS app, please contact us by emailing customer.service@eyfs.info. Back to Main Tutorials Page
Recommended Posts