Access Keys, Limited Access, and TimeLock
Overview
UnoLock access keys can be granted different levels of authority. Some keys can fully administer the Safe, while others can be limited to narrower access such as selected Spaces. TimeLock is a separate feature: it temporarily locks an individual access key for a selected period of time. It does not define admin or read-only permissions.
How It Works
- Admin Access Keys: Admin keys can manage the Safe, register or revoke other keys, and change access settings.
- Limited-Access Keys: Other keys can be constrained to narrower Safe or Space permissions.
- Separate TimeLock Feature: TimeLock can be applied to an individual access key for a selected number of hours when the Safe is closed.
- Different Purposes: Key permissions define what a key is allowed to do. TimeLock defines when a specific key can next be used.
Security Implications
- Granular Delegation: Users can share the same Safe without making every participant a full administrator.
- Reduced Change Risk: Read-only or limited keys lower the chance of accidental or malicious modification.
- Short-Term Delay Option: TimeLock can make a specific key temporarily unusable during a brief high-risk period.
Use Cases
- Family Safes: One person keeps admin rights while another person receives limited access to selected areas.
- Team Operations: A collaborator can be given visibility without full administrative control.
- Checkpoint Protection: A specific access key can be time-locked for a few hours before a risky situation such as a checkpoint or search.
Why It Matters
The important distinction in UnoLock is not just who can open a Safe, but what each access key is allowed to do once inside. Key permissions and TimeLock solve different problems and should not be treated as the same feature.
FAQs
What is the difference between admin and limited access?
Admin access can manage the Safe and other keys. Limited access applies narrower permissions such as selected Spaces.
Can access be restricted to only some Spaces?
Yes. UnoLock can grant narrower access to selected Spaces instead of full Safe administration.
Is TimeLock the feature that creates admin or read-only access?
No. TimeLock is a temporary per-key delay. Access levels are handled by key management and Space permissions.
Compliance & Privacy Regulations
- Controlled Access Management: Key permissions and temporary key delays help users apply least-privilege access in sensitive environments.
Integration with Other Features
- Robust Key Management with Multi-Key Registration and WebAuthn: Supplies the registered access keys.
- Spaces Granular Data Access and Control: Works with Space-level boundaries inside the same Safe.
- TimeLock: Temporarily locks a specific access key without changing its underlying permission level.
