Option allowing access to the back office without transmission of accesses.

Prerequisites

[X] I understand and accept the project's code of conduct
[X] I have already searched in existing features request and found no previous suggestion of this feature.

Is your feature request related to a problem?

It concerns the default configuration on the Back office. Based on the customers' insights and security risk they run while sharing their Admin access with tech-editors.

Back-office accesses are transmitted in clear text via the support mailbox or by email. These accesses are stored in clear text in the history of exchanges with the merchant.

Describe the solution you'd like

The idea is to minimize the risks of a security breach in case of support intervention on merchant's back office.The solution would be to allow the connection to the back-office without access transmissions. This feature exists on ZenDesk for example (see attachment). We have the possibility to give a certain period of time during which the ZenDesk team can take control of the agent's account, simply by clicking on an access button.

This would allow the merchant to choose who would have access to the back-office, for a limited period of time, without transmitting their accesses in cleartext via email or messaging.

Krystian Podemski told us that a module could be developed in this sense, but that it could also be a feature implemented directly in the Core.

Alternatives you've considered

No response

Additional context

No response

Do you plan to work on this feature?

[ ] I'm willing to contribute a formal specification.
[ ] I'm willing to provide any wireframes or design assets required for this feature.
[ ] I'm willing to submit a Pull Request that implements this feature.
[x] I'm willing to help verify that the implemented feature works as intended and produces no unintended side effects.

PrestaShop / PrestaShop