Securing TurboCASH

 

Why use access control?

TurboCASH has a liberal and powerful batch processing system. If you are the only user using the system then the idea is to give you as close an experience as we can to a spreadsheet. This becomes more difficult when all data has to be balanced, but a compromise can be reached.

 

 

Videos


If you are not familiar with basic blockchain principles check out this Anders Blockchain video tutorial.
Blockchain explained

The TurboCASH blockchain implementation



Single userTurboCASH

TurboCASH Passwords

Firebird

TurboCASH Blockchain

 

 

Single userTurboCASH

The starting point is TurboCASH with all data entered by a single user. Here the demand is the ease of use, speed of data entry, and data integrity. The TurboCASH batch entry system meets these needs. Data entry is almost spreadsheet-like, but debits and credits are balanced by batch, by period so that the Trial Balance must always be in balance. This is augmented by a balanced bank recon. TurboCASH has a powerful feature in that batches can be reversed, modified, and reposted.

  I am assuming that you have a future vision for your business that includes expanding your transaction processing and including multiple users. If this is in your plans, then TurboCASH is the right place to do it.

Note

If you are the only user and your data is secured by you on a protected PC, then there is no need to implement access control, you control by controlling physical access to your PC.


TurboCASH Passwords

There are three levels of protection in TurboCASH Accounting.

Simple access control

This is available free to all users from version 3 onwards. It applies when you have more than one user both using the same machine. If you are coming in from different machines, you will need a multiuser subscription for $200 per year.

Use setup access control to give a simple password to each of your users.

These are easy-to-use passwords (Can even be as simple as one letter)

This will allow you to give different roles to differnet users and to limits funtions fro security.

The advantage is that you can track which users have been on the system. You can a

You will have a log of user access



Security this way is limited

These passwords will stop most users, but a coder who can get access to your files can get in.

Outside users of other software can still access the data. (eg. Flamerobin). The data is not encrypted. You will need TurboCASH 5.2 and onward to set up encrypted data.

A caution

If you do implement the access control remember this is accounting data. Do not forget your password. If you are going to forget your password, do not implement this feature.

If you forget this password you will have to identify yourself to the TurboCASH project and submit your books. There is a $60 fee to unlock this.

Firebird

The next level using encryption is available to TurboCASH 5.2 users. (Paid $60 subscription)

You can set up your TurboCASH books as a firebird server. The default database password (outside of TurboCASH) for the Firebird Database is sysdba masterkey. If you change this password, then no outside software can access this database without the Firebird password! Not even us. If you forget the Firebird Password there is no way to unlock the data!



Rarely, the Firebird installation becomes corrupt. You will then have to reenter the sysdba and masterkey passwords (Rare). We use Firebird because it is very robust and almost never breaks.

Blockchain

TurboCASH from 5.2 onwards has a block chain facility. It does not stop attackers entering, but will inform you if there have been any unwarranted changes.

TurboCASH 5.2 users can enable blockchain for a given set of books

Setup > Setup > System Parameters > Enable Blockchain []



You then have the option to determine how often you recalculate the Blocks. This will give you the confidence to know each update contains all the previous data immutably and that no changes have been made without your knowlege.

It is worth taking the time to understand blockchain principles – they are a very powerful way of protecting data.