.. _blocklist:

**************************************
List of User Sessions. Blocklist
**************************************


.. rubric:: In this chapter:

.. contents::
   :local:

FindFace allows you to monitor user sessions and learn associated data, such as the connected device UUID, type of user interface, IP address, last ping time, and so on.

If necessary, you can add a device to the blocklist without deactivating the user account. The device block may come in handy in various situations. For example, if you want users to access the system only from their workplaces. Use the blocklist functionality to take your system safety to the next level.


Grant Permissions to Work with Sessions
==========================================

A user's access to the list of sessions depends on the granted :ref:`permissions <create-role>`:

* Administrator: can view and close sessions of all users
* User with the ``all_own_sessions`` permissions: can view/close all sessions initiated with their username
* User without the ``all_own_sessions`` permissions: can only view/close their current session


View User Sessions
=================================

To view the list of user sessions, navigate :guilabel:`Settings` -> :guilabel:`Sessions`. 

     |sessions_en|

     .. |sessions_en| image:: /_static/sessions_en.png
        :scale: 45%

     .. |sessions_ru| image:: /_static/sessions_ru.png
        :scale: 45%

Each session record provides the following data:

* device UUID
* username
* type of the user interface (mobile/web)
* device information
* IP address
* status (online, offline, blocked)
* last ping time

Use the filter panel above the list of sessions to set up the search conditions.

To close a session, select it in the list and click :guilabel:`x`.

     |sessions_close_en|

     .. |sessions_close_en| image:: /_static/sessions_close_en.png
        :scale: 60%

     .. |sessions_close_ru| image:: /_static/sessions_close_ru.png
        :scale: 60%



Block Device
================================

The list of blocked devices is available on the :guilabel:`Blocklist Records` tab. 

     |blocklist_en|

     .. |blocklist_en| image:: /_static/blocklist_en.png
        :scale: 45%

     .. |blocklist_ru| image:: /_static/blocklist_ru.png
        :scale: 45%

You can add a device to the blocklist on the :guilabel:`Sessions` tab. Blocking a device leads to the user's automatic log-out.

To block a device, do the following:

#. Select the relevant session record(s).
#. Click :guilabel:`Block`. 

     |block_sessions_en|

     .. |block_sessions_en| image:: /_static/block_sessions_en.png
        :scale: 60%

     .. |block_sessions_ru| image:: /_static/block_sessions_ru.png
        :scale: 60%

#. Specify the reason for the device to be blocked (mandatory) and the block expiry date (optional). If no date is specified, the block will be permanent. 
#. Click :guilabel:`Save`.

     |block_en|

     .. |block_en| image:: /_static/block_en.png
        :scale: 65%

     .. |block_ru| image:: /_static/block_ru.png
        :scale: 65%