Tenant isolation
Organisation and league IDs are checked at protected operations so administrators from one customer cannot administer another.
OcheControl was designed as multi-tenant software from the start, with scoped administrators and restricted scoring devices rather than one shared admin password.
Organisation and league IDs are checked at protected operations so administrators from one customer cannot administer another.
A league administrator can be restricted to specific leagues while organisation owners retain broader control.
Board-device tokens are hashed at rest, can expire and can be revoked immediately.
Administrative changes, device provisioning, corrections and disputes are attributed to individual users.
Secure cookies, email verification, rate limiting, PostgreSQL migrations and production configuration checks are built into v1.
Organisation owners can export their competition data and use a deliberate confirmation workflow for deletion.