• Resolved shayatik

    (@shayatik)


    I’m a web developer and I install Site Kit on all of my clients’ websites.

    The problem is – in WordPress Admin they can easly go to

    wp-admin/admin.php?page=googlesitekit-settings#settings/analytics/edit

    and while editing the settings all my Analytics Accounts / Properties / Views are exposed meaning they can get a list of my other clients.

    How can we prevent it?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support James Osborne

    (@jamesosborne)

    @shayatik Thanks for opening a support topic. Each WordPress administrator has the ability to setup Site Kit, using their own Google accounts. With that Google account they would need permissions to access the various product dashboards.

    In your case can you inform me of the below:
    1. Are you using a shared WordPress admin login?
    2. Do you have all Analytics properties under the same Google account?

    Thread Starter shayatik

    (@shayatik)

    1. No. I have my own user and I created an admin user for them as well.
    2. Yes. It’s just easier to have them all under the same account.

    Thanks.

    Plugin Support James Osborne

    (@jamesosborne)

    @shayatik Thanks for providing an update. Understood in relation to keeping properties under the same account.

    In your case when you are adding a new property you will need to provide grant access to a Google account per client per property, at least “Read & Analyze” permissions. You’ll need to know the associated Google account for each WordPress admin user for each client site unfortunately.

    Another option is to direct users on how to setup and configure Site Kit, while also suggest they grant permission to your Google account to keep track on performance. That way you won’t encounter property limitations per account.

    In order to ensure other users can’t view the other accounts or properties ensure they use a separate WordPress admin login and their associated Google accounts don’t have the relevant permissions from within your Analytics settings.

    Let me know if that answers your query. There is also an open GitHub issue in relation to sharing permissions for other WordPress users (independent of their Google account).
    https://github.com/google/site-kit-wp/issues/6

    Plugin Support James Osborne

    (@jamesosborne)

    @shayatik As we didn’t receive a response I will mark this as resolved. Feel free to open a new support topic if you have any further queries. And thanks for using Site Kit.

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘How to prevent listing of other accounts?’ is closed to new replies.