Limit punch-in access to LAN users

[jvarn]

I don't want to lock the HRM system into my intranet; it should be remotely accessible. But one feature in particular has prevented me from implementing the punch in / out functionality: What is to stop an employee who is running late from punching-in from his smart phone in the car on his way?

Would it be possible to somehow limit access to certain functions to specified IP addresses, a fixed IP range, and/or the local network?

Ideally it could be a combination of the above depending on job role and assigned privileges. Telecommuters, for example, could have flexible privileges.

Look forward to hearing people's thoughts.

Cheers, Jeremy

[madhusanka]

Hi Jeremy,

It is possible to limit access for ESS users to perform Punch-In/Punch-Out, based on which IP that they login. Since OrangeHRM is based on MVC, it's possible to detect the IP address at the controller level and apply the restriction. The effort required would be very less according to my view.

It's also possible make this flexible (for telecommuters, as you have mentioned). This would required some additional effort to create screens to add what Job Titles and/or employees that are allowed to Punch-In and Out from external networks.

[Remeh123]

Ideally it could be a combination of the above depending on job role and assigned privileges. Telecommuters, for example, could have flexible privileges.

[Tipsacon]

Ideally it could be a combination of the above depending on job role and assigned privileges.

But it's hard to turn it into reality

[jgt]

This is as much a question as an answer, but do phones generally transmit their gps location as part of the server string. If so then you should be able to determine if the phone is physically more than 5 minutes away from the workplace entrance.