Introduction

Administration, User Management, Site Access

Allows Joomla! administrators to log in as any other user.


Sometimes users report issues on your site which at first glance don't make sense. Troubleshooting them requires having access to their user account on your site. For example, reported issues with discount coupon codes in e-commerce sites, or users not seeing modules / menu items which according to their user groups they should be seeing.

Being able to quickly log into your site as that user is a tremendous help in verifying the validity of the issue report and troubleshooting it.

This plugin adds a "Login as user" button in Joomla's Users page to make this possible.

Security

Skeleton Key is only available to select user groups, configurable in the plugin itself, by default user group 8 (Joomla's default Super User group).

Moreover, you can only log in as a user which belongs in one of the allowed user groups, by default user group 2 (Joomla's default Registered group). Further to that, you cannot log in as a user which belongs in one of the forbidden groups (by default, Joomla's default Administrator and Super User groups). These groups are configurable as well.

Authentication takes place using single-use, secure hashes with a very short expiration (default: 10 seconds) and HTTP-only cookies. This minimises the opportunity window for an attack and raises the bar for a successful attack to something that is unrealistic. In simple terms, yeah, it's as secure as it gets.

Great plugin



Posted on 22 September 2023
Functionality
This is a very good plugin when you want to see the front-end of site without asking an user password or during the development
Ease of use
I didn't undertand directly the login was from backend with a button in the users list , but when you have understand this it's easy
Documentation
The documentation is only the short readme on github , when you have understand how it's work it's enought
I used this to: upgrade a client site where the group don't have the same access
Owner's reply: Thank you for the insightful review! You are right, I had not written any documentation. I mistakenly thought it was redundant. I have now added documentation in the Wiki section of the repository, see https://github.com/akeeba/skeletonkey/wiki

If you spot something missing, or are unclear about something not discussed there, please feel free to open a new Issue on GitHub and tell me about it. I tried to document as much as I could think of, but I have to admit I am too far removed from the average user to understand what their challenges setting this up would be without some constructive feedback.
Akeeba Backup
Free

Akeeba Backup

By Akeeba Ltd
Site Security
Akeeba Backup Core is the most widely used open-source backup component for the Joomla! CMS. Its mission is simple: create a site backup that can be restored on any Joomla!-capable server, making it ideal not only for backups but also for site transfers or even deploying sites to your clients' servers. Akeeba Backup creates a full backup of your site in a single archive. The archive contains all...
Admin Tools
Free

Admin Tools

By Akeeba Ltd
Site Security
Admin Tools is a true Swiss Army knife for your site. Our freely available Admin Tools Core fix your files' and directories' permissions, protect your administrator directory with a password, migrate links pointing to your old domain on-the-fly and perform database maintenance, all with a single click. Now with Joomla! 5 support! We have two currently maintained version families. Admin Tools 7: J...
Admin Tools Professional
Paid download

Admin Tools Professional

By Akeeba Ltd
Site Security
Admin Tools Professional is a comprehensive security enhancing component and site administration toolkit for your Joomla!™ site. We were the first component to offer a triple layer of security for your site: active server security with our .htaccess, NginX Conf and Web.Config Maker; active application security with our Web Application Firewall; passive security with our PHP File Change Scanner w...
Akeeba Engage
Free

Akeeba Engage

By Akeeba Ltd
Articles comments
Free of charge solution for comments in Joomla™ core content (articles). Full HTML editor, fast, secure. Now with Joomla! 5 support! Nested, full HTML comments. Comments can be nested (up to 6 levels deep). Your site’s visitors enter comments using Joomla’s configured WYSIWYG editor; no more typing in raw HTML / bbCode / Markdown or using awkward editors which look out of place. All comment...
Akeeba SocialLogin
Free

Akeeba SocialLogin

By Akeeba Ltd
Site Access
Allow your users to log in with their social media profile (Facebook, Twitter etc) or account (GitHub, Google, Microsoft). Your users can login or create a new user account to your site using their social media profile (Facebook, Twitter etc) or account (GitHub, Google, Microsoft). For example, someone can create a user account on your site using their Facebook login, without going through Jooml...
Amazon S3 Filesystem
Free

Amazon S3 Filesystem

By Akeeba Ltd
File Management
Integrate Amazon S3, CloudFront and Amazon S3–compatible storage with Joomla!'s Media Manager. Only for Joomla! 4 and later versions. This plugin allows you to save your media files to Amazon S3 and third party storage services compatible with the Amazon S3 API (with S3 signatures version 2 or 4). You can optionally use this plugin with Amazon S3 buckets serving as origins for an Amazon CloudF...
Akeeba Ticket System Core
Free

Akeeba Ticket System Core

By Akeeba Ltd
Help Desk
A simple, powerful helpdesk component for Joomla!. Now with Joomla! 5 support! Users can be given permissions to create support tickets in one or more support categories. Only the person who filed the ticket called the owner and specifically authorised users called the support staff (or “managers”) can reply to them. This is unlike a forum where anyone can reply. Support tickets can be priva...
Akeeba Ticket System Professional
Paid download

Akeeba Ticket System Professional

By Akeeba Ltd
Help Desk
A simple, powerful helpdesk component for Joomla!. Now with Joomla! 5 support! Users can be given permissions to create support tickets in one or more support categories. Only the person who filed the ticket called the owner and specifically authorised users called the support staff (or “managers”) can reply to them. This is unlike a forum where anyone can reply. Support tickets can be priva...
Akeeba DataCompliance
Free

Akeeba DataCompliance

By Akeeba Ltd
Site management tools
A simple tool to facilitate GDPR conformance of your Joomla! sites. Now with Joomla! 5 support! The component allows the site's visitors to: give or revoke their consent for personal data processing (and prevent the user from using the site if they have not provided consent). export all data we have on them to a commonly machine-readable format (XML). exercise their right to be forgotten (accou...

SkeletonKey

Version:
1.0.7
Developer:
Akeeba Ltd
Last updated:
Oct 02 2024
1 day ago
Date added:
Dec 03 2022
License:
GPLv2 or later
Type:
Free download
Includes:
p
Compatibility:
J4 J5
Download

Uses Joomla! Update System

Score:


Write a review