Production Update 1.1.6
Summary
This release strengthens Admin Portal login security with mandatory email OTP and introduces role-based access control so each admin only sees features matching their assigned role.
Added
- The Admin Portal now uses a formal permission matrix with six defined roles — System Admin, Super Admin, Finance Admin, Operation Admin, Platform Admin, and Support Admin — each with specific access limits for wallets, transactions, user management, and admin account management.Module: Access Control · Portal: Admin
Improved
- Game allocation details on the Admin Transactions page load faster when viewing multi-game deposits.Module: Payment Transactions · Portal: Admin
- Permission names are clearer when viewing or creating admin accounts, for example "Wallet Management" instead of internal codes.Module: Access Control · Portal: Admin
- Pages such as Game Wallets, Users, Transaction Limits, and Provider Fees now hide action buttons that the current role is not allowed to use.Module: Access Control · Portal: Admin
- When creating a new admin account, permissions are assigned automatically by role — no need to select them manually.Module: Access Control · Portal: Admin
- Improved game provider display on the Game Wallets page for Finance Admins.Module: Game Wallet · Portal: Admin
Fixed
- Fixed an issue where Platform Admins sometimes saw "No payment transactions match your filters" even when data existed.Module: Payment Transactions · Portal: Admin
- Email is now required when creating a new admin account.Module: Account Management · Portal: Admin
- Existing admin accounts are automatically given default permissions for their role if any were missing.Module: Access Control · Portal: Admin
Security
- Email OTP is now required for all Admin Portal logins, regardless of whether 2FA was previously enabled on individual accounts. Codes are sent to the admin account email, valid for 5 minutes, with a limit of 5 requests per hour. The login screen now shows an OTP expiry hint.Module: Authentication & Security · Portal: Admin
Required Actions
- Make sure the email on your admin account is correct and accessible. If you do not receive an OTP, check your spam folder or contact a System Admin.Module: Authentication & Security · Portal: Admin
- Sign out and sign back in after this release to pick up your updated permissions.Module: Access Control · Portal: Admin
- If you are missing access needed for your daily work, contact a System Admin to review your role — do not use a higher-privilege account as a workaround.Module: Access Control · Portal: Admin
- Your first login after this release will require an email OTP.Module: Authentication & Security · Portal: Admin
Affected Modules
- Authentication & Security
- Access Control
- Account Management
- Payment Transactions
- Game Wallet
Affected Portals
- Admin Portal