Settings and activity
2 results found
-
1,063 votes
Hi everyone, a year on from my last engagement we wanted to provide an update for you all here.
As many will be across we're in the midst of making a lot of iterations and improvements to new invoicing leading up to the retirement of classic invoicing in September (2024).
We have a fair amount of work lined up in the teams schedule over the coming months and to give an indication there isn't any committed plans around a function to add interest to invoices.
That said, we do have a team that have picked up and are considering how we might solve this with the technology in new invoicing - It's early days on this yet, but I'll share if there's any progress on this for you all here.
In the meantime, as has been shared by others over time there are a few ways you could accomplish this…
An error occurred while saving the comment
Ani Moller
supported this idea
·
-
1,091 votes
Hi everyone, we appreciate the interest surrounding this idea, however we want to be open that we're unable to extend our log-out time past 60 minutes. Xero hold a lot of sensitive information including bank data and we're required to be as secure as online banking.
Any session information running on a web browser can potentially be stolen. If the session does not time out. You then have an infinitely long vulnerability window to session hijacking. Our best option is to keep a tight expiration window on the session cookie, and regenerate them frequently. Even setting a long timeout doesn't help with this - too long a timeout will greatly increase the risk of invasion or potentially jeopardise your personal data and the safety and integrity of the Xero application itself. This is why we maintain control of this.
If we detect there's been no activity on a page (e.g…An error occurred while saving the comment
Ani Moller
commented
Wow, this is a super annoying (feature) of the system. I totally get it for organisations working in offices where data privacy is critical. But I'm a sole trader and work alone. I would prefer a timeout of 12 hours.
I am gob smacked that this isn't a native feature?!