Automatic workstation functionality management based on login credentials
The present disclosure involves systems, software, and computer implemented methods for automatically controlling access and limiting functionality of a computer workstation based on which user is currently logged in. In some implementations, an overwatch application is installed on the workstations to be controlled and monitored. If an authorized, but limited, user logs in, the overwatch application can initiate a lockdown process on the workstation. In some instances, the lockdown process is managed by a dedicated lockdown application, which is initiated or notified from the overwatch application, and which can initiate a lockdown of particular applications, functionality, and allowed interactions on the workstation until the limited user has completed their task and a new user logs in.
1. A system for controlling access to a computer, the system comprising:
a communications interface;
at least one memory storing instructions;
at least one hardware processor interoperably coupled with the at least one memory and the communications interface, the instructions instructing the at least one hardware processor, when executed, to perform operations comprising:
detecting a login attempt associated with the computer as initiated by a user, wherein the login attempt is associated with a set of credentials;
determining that the set of credentials are associated with a limited user, wherein the limited user is associated with a pre-defined set of authorized functionality and a pre-defined set of non-authorized functionality for use with the computer;
in response to determining that the set of credentials are associated with a limited user:
initializing a lockdown application;
identifying, by the lockdown application, one or more operating non-authorized functionalities;
terminating, by the lockdown application, the identified non-authorized functionalities; and
monitoring, by the lockdown application, attempted accesses of one or more functionalities at the computer by the limited user prior to allowing access to the one or more functionalities;
detecting, by the lockdown application, attempted access to a first functionality associated with the computer by the limited user, wherein the detection occurs prior to allowing access of the first functionality;
determining, by the lockdown application, whether the first functionality is included within the pre-defined set of non-authorized functionality; and
in response to determining that the first functionality is included in the pre-defined set of non-authorized functionality, preventing, by the lockdown application, access to the first functionality associated with the computer.
2. The system of claim 1 , wherein the set of credentials are associated with a particular user role, and wherein the limited user comprises a user associated with the particular user role.
3. The system of claim 1 , wherein the pre-defined set of authorized functionality is defined for a user role associated with the user.
4. The system of claim 1 , wherein the pre-defined set of authorized functionality is specifically associated with the user.
5. The system of claim 1 , wherein the pre-defined set of authorized functionality comprises a set of authorized applications allowed to execute at the computer.
6. The system of claim 1 , wherein the pre-defined set of authorized functionality comprises an allowed set of hardware inputs associated with at least one application executing or to be executed at the computer.
7. The system of claim 6 , wherein the first functionality is a hardware input not included in the pre-defined set of authorized functionality, and wherein preventing access to the first functionality associated with the computer comprises prohibiting the hardware input from being passed to a particular application or process.
8. The system of claim 1 , wherein initializing the lockdown application comprises:
identifying a set of currently executing applications and processes at the computer;
determining that at least one of the currently executing applications and processes at the computer is not included in the pre-defined set of authorized functionality associated with the limited user; and
terminating the at least one determined currently executing application and process at the computer.
9. A non-transitory, computer-readable medium storing computer-readable instructions executable by at least one processor and configured, when executed, to perform operations comprising:
detecting a login attempt associated with a computer as initiated by a user, wherein the login attempt is associated with a set of credentials;
determining that the set of credentials are associated with a limited user, wherein the limited user is associated with a pre-defined set of authorized functionality and a pre-defined set of non-authorized functionality for use with the computer;
in response to determining that the set of credentials are associated with a limited user:
initializing a lockdown application;
identifying, by the lockdown application, one or more operating non-authorized functionalities;
terminating, by the lockdown application, the identified non-authorized functionalities; and
monitoring, by the lockdown application, attempted accesses of one or more functionalities at the computer by the limited user prior to allowing access to the one or more functionalities;
detecting, by the lockdown application, attempted access to a first functionality associated with the computer by the limited user, wherein the detection occurs prior to allowing access of the first functionality;
determining, by the lockdown application, whether the first functionality is included within the pre-defined set of non-authorized functionality; and
in response to determining that the first functionality is included in the pre-defined set of non-authorized functionality, preventing, by the lockdown application, access to the first functionality associated with the computer.
10. The computer-readable medium of claim 9 , wherein the set of credentials are associated with a particular user role, and wherein the limited user comprises a user associated with the particular user role.
11. The computer-readable medium of claim 9 , wherein the pre-defined set of authorized functionality is defined for a user role associated with the user.
12. The computer-readable medium of claim 9 , wherein the pre-defined set of authorized functionality is specifically associated with the user.
13. The computer-readable medium of claim 9 , wherein the pre-defined set of authorized functionality comprises a set of authorized applications allowed to execute at the computer.
14. The computer-readable medium of claim 9 , wherein the pre-defined set of authorized functionality comprises an allowed set of hardware inputs associated with at least one application executing or to be executed at the computer.
15. The computer-readable medium of claim 14 , wherein the first functionality is a hardware input not included in the pre-defined set of authorized functionality, and wherein preventing access to the first functionality associated with the computer comprises prohibiting the hardware input from being passed to a particular application or process.
16. The computer-readable medium of claim 9 , wherein initializing the lockdown application comprises:
identifying a set of currently executing applications and processes at the computer;
determining that at least one of the currently executing applications and processes at the computer is not included in the pre-defined set of authorized functionality associated with the limited user; and
terminating the at least one determined currently executing application and process at the computer.
17. A computerized method performed by one or more processors, the method comprising:
detecting a login attempt associated with the computer as initiated by a user, wherein the login attempt is associated with a set of credentials;
determining that the set of credentials are associated with a limited user, wherein the limited user is associated with a pre-defined set of authorized functionality and a pre-defined set of non-authorized functionality for use with the computer;
in response to determining that the set of credentials are associated with a limited user:
initializing a lockdown application;
identifying, by the lockdown application, one or more operating non-authorized functionalities;
terminating, by the lockdown application, the identified non-authorized functionalities; and
monitoring, by the lockdown application, attempted accesses user of one or more functionalities at the computer by the limited user prior to allowing access to the one or more functionalities;
detecting, by the lockdown application, attempted access to a first functionality associated with the computer by the limited user, wherein the detection occurs prior to allowing access of the first functionality;
determining, by the lockdown application, whether the first functionality is included within the pre-defined set of non-authorized functionality; and
in response to determining that the first functionality is [not] included in the pre-defined set of non-authorized functionality, preventing, by the lockdown application, access to the first functionality associated with the computer.
18. The method of claim 17 , wherein the set of credentials are associated with a particular user role, and wherein the limited user comprises a user associated with the particular user role.
19. The method of claim 17 , wherein the pre-defined set of authorized functionality is defined for a user role associated with the user.
20. The method of claim 17 , wherein the pre-defined set of authorized functionality is specifically associated with the user.