Cutting off an access in TimeTonic goes through four distinct mechanisms, in four different places. None of them replaces the others.
This article brings them together, with their exact reach and their side effects.
Which mechanism for which need
| What you want to cut off |
The action |
Side effect |
Where it is explained |
| One specific integration |
Delete its API key |
None on the other keys. It is the most surgical action. |
API keys (Sesskey) |
| Everything connected with your account |
Log out your other sessions |
All your API keys stop working. Your integrations stop. |
Edit my profile and my options |
| A view link circulated outside |
Delete the share URL of the view |
The link dies for all its recipients, including the legitimate ones. |
Check your external sharing |
| One person's access to your data |
Remove them from the workspace |
Does not touch the API keys they had generated from their account. |
Set member rights |
| An access offered but not yet accepted |
Cancel the invitation |
None. It is the most frequent omission in an access review. |
Manage your invitations |
Delete an API key
Open the Settings of your account, section API keys (SessKey). Each key in the list has three icons: copy, rename, delete.
Click the trash icon of the key concerned. A confirmation warns you that the applications using this key will be disconnected. Once validated, the key stops working immediately, without affecting the others.
The detailed procedure → Create and manage your API keys (Sesskey)
This operation is only safe if your keys are named. A list of anonymous keys forces you to guess which one to delete, and the wrong answer cuts off an integration in production. Good naming practice is described in
Create an API account restricted to filtered views.
Close all the sessions of the account
The Log out your other sessions option, in your profile settings, closes every open session at once: browser, mobile app, and all the API keys.
Where to find this option → Edit my profile and my options · Securing your organisation's accounts
This is the radical action, not the default one. All your integrations stop and the keys will have to be regenerated one by one. Keep it for cases where the account itself has been compromised.
Cut off a share link
Open the Share window of the view concerned and click Delete the share URL of the view. The address stops working immediately, for everyone.
If sharing has to resume with other recipients, share the view again: a new address is generated, with no connection to the old one.
The detailed procedure → Check your external sharing · Share your table data
To avoid getting to that point, a form link sent by email is better protected from the start by a
single-use token, which invalidates it after the first submission: see
External form.
Remove a member, cancel an invitation
Removing a person from a workspace removes their access to it, workspace by workspace. An invitation that has been sent but not accepted remains an open access: cancel it at the same time.
The detailed procedure → Set member rights · Manage your invitations
Removing a member does not cut off their API keys. A key generated from their account continues to exist on that account. This is why integrations are better built from a
dedicated API account, which does not depend on any individual.
In case of compromise: the order of operations
1
Change the password of the account
Before anything else: without that, the access can be recreated as soon as it is cut off.
2
Log out all the sessions
This also closes the API keys. Note beforehand which integrations are running, you will have to set them up again.
3
Cut off the sensitive share links
Shared views, external forms, exposed attachments. Then share again what needs to be shared.
4
Review members and invitations
On each workspace concerned.
5
Report the incident
If you suspect a leak of personal data, contact TimeTonic's data protection officer: dpo@timetonic.com. In the event of a confirmed breach, the data controller has 72 hours to notify the supervisory authority.
Go further
Create and manage your API keys
Create, name, copy and delete a key.
Read more →
Go further
Check your external sharing
Protect a link before you have to cut it off.
Read more →
Go further
Manage your invitations
Track and cancel an access that has been offered.
Read more →