Back to Changelog
Panel Backend
v1.0.434
Root-scoped security settings and advice now refer to the operator account only
Bug Fixes
2- Requiring 2FA for ROOT accounts could not be switched on. Installation creates two accounts with the root role — the operator's and the assistant's service account — and the guard counted the service account, which has no way to complete a two-factor challenge, so the condition could never be met. Service accounts are now exempt from role-wide 2FA requirements and are no longer counted.
- Root security advice now describes the operator account created during installation, instead of whichever account with the root role happened to be read first. Warnings stayed on the dashboard after the operator had already changed their password or enabled 2FA, because the warning was never about their account. The advice now names the account it measured.