Overall
Design Document Department of Computer
Science Page maintainer: Terrence
Asgar-Deen |
The login process is the first process that any user, administrator or salesperson, has to do in order to get into the system. This process requires the user to enter his/her password to login to the system. There are 2 levels of security. For example, a salesperson can only access certain levels of the system. On the other hand, the administrator can access the entire system. Since passwords are used by the login process, changing passwords is also an essential function for both the administrator and the salesperson.
The administrator will assign a password to a new salesperson through the process "Assign New Password". The procedure is the following: When the salesperson first comes in, the administrator will send the unique salesperson Identification Number to the process "Assign New Password". A valid password is generated and that particular salesperson Identification Number will be sent to the password table. This results in the table being updated every time a new password is generated. The generated password will be returned to the administrative level and will be activated.
As was said earlier, the adminstrator also enters a password to get into the system. The process above only deals with salespeople. How does the adminstrator get its password?
The salesperson can change his or her password by choosing the "Assign New Password" option through the menu or the toolbar. The procedure for this change is the following : when the salesperson wants to change his/her password, he/she enters his/her old password. The system will process this request by checking for the existence of the current user's salesperson Identification Number in password table and verifying that the entered password is identical to the password in the table. If the components are identical, the new password will be entered by the salesperson again and that new password will be validated by the system. On the other hand, if the components are not identical, the system will generate an error message on the screen notifying the user that the request has failed.