Аккаунт в General iT
Войдите или создайте аккаунт для управления услугами в панели.
MODULE FOR 1C-BITRIX
Anton Chekhov
Application security module for the on-premise version of Bitrix24 protects employee corporate correspondence from unauthorized administrator access via the 'Log in as user' mechanism. The solution blocks or controls access to chats, maintains a full audit log, sends notifications about access attempts, and helps meet information security requirements.
Application security module for the on-premise version of Bitrix24 protects employee corporate correspondence from unauthorized administrator access via the 'Log in as user' mechanism. The solution blocks or controls access to chats, maintains a full audit log, sends notifications about access attempts, and helps meet information security requirements.
In the on-premise version of Bitrix24, an administrator with appropriate rights can view all employee correspondence without notifications or logging. This creates risks of confidential data leaks and violations of 152-FZ, GDPR, internal regulations, and ISO/IEC 27001 standards. Potentially vulnerable data includes personal and work messages, HR correspondence (complaints, terminations, compensation), legal and medical information, as well as personal data of clients and employees.
The 'Chat Correspondence Protection' module implements application-level access control and administrator action auditing in the on-premise version of Bitrix24 without modifying the system core.
Bitrix24 Chat Protection Module
Detects administrator login in the 'Log in as user' (impersonation) mode. Controls and restricts access to message history. Implements dual logging: application log entries and independent recording via database mechanisms. Sends real-time notifications to the information security team via messenger, email, or webhook. Protects module settings with a master password. Provides a controlled temporary access mode (Emergency Override).
The module complicates covert use of impersonation and ensures transparent auditing of administrator actions.
Business benefits
Reduced risk of confidential data leaks.
Transparency of administrator actions.
Readiness for internal and external audits.
Compliance with 152-FZ, GDPR, and ISO/IEC 27001 standards.
Increased employee trust in the corporate system.
Important
The module operates at the application level of Bitrix24 and is designed to control access through system interfaces. Protection against administrators with direct access to the server and database requires additional infrastructure measures.
When needed, General iT can implement “Chat message protection in Bitrix24”, configure the module and verify it against the current website setup.
USER EXPERIENCE
How does this solution work in a real project? Share your experience and help others choose.
There are no reviews of this solution on git.ru yet. Tell us what worked well and what could be improved.
Verified purchaseAdd a key if you wish. A verified review gets a badge, priority placement and more rating weight.
Open to every clientJust sign in to your account. A key is optional; all reviews are moderated.
YOUR PROJECT INFRASTRUCTURE
FROM THE SAME DEVELOPER
Anton Chekhov
The 'Update CRM Entity' activity updates fields of any entity in Bitrix24 using a filter. Supported entities include standard objects (Lead, Deal, Contact, Company) and any smart process. Configuration requires selecting the entity type and defining filter conditions. The filter can target any fields, including custom ones.
The module includes the 'PHP code with syntax support' activity. It is a version of the 'Arbitrary PHP code' activity featuring syntax highlighting.
The module adds a full calendar view for smart processes in Bitrix24 CRM, identical to the standard view for tasks and other entities. After installation and configuration, a 'Calendar' tab appears in the smart process element list. Elements are displayed on the timeline based on specified dates. Fields of type 'Date' and 'Date/Time' are supported.
MORE FOR YOUR WEBSITE
The SMSBiz module is designed for sending SMS notifications in online stores and corporate portals built on the 1C-Bitrix platform. Installation and use do not require programming skills and take only a few minutes. The solution is based on the SMSInt service, which has been operating in the market for over 15 years.
The module allows you to quickly add a New Year atmosphere to your website. The package includes falling snow effects and interactive Christmas ornaments positioned at the top of the page.
iTrack Document Registry provides a centralized solution for managing all documents generated within CRM entities: leads, deals, contacts, companies, and quotes. The tool also supports creating document registries from files stored in Bitrix24.Disk.
BEFORE YOU ORDER