Super Admin

The super-admin page controls which settings pages require an elevated session before they can be opened or saved. This is the protection layer used for sensitive administrative configuration.

Pages

Protected Pages

Choose which settings pages require the super-admin password.

Protected pages

• Choose which settings page handles should require super-admin access.
• The protection list is stored in superAdminProtectedPages.
• Protected pages include the main settings sections unless they are explicitly left open.

Access flow

• Protected pages redirect to the super-admin login when the session is missing.
• Successful authentication unlocks access for a limited session window.
• The elevated session lasts 15 minutes before re-authentication is required.

Open pages

• System report remains available without the super-admin flow.
• Store email, email preview, and store widgets are also kept open for regular admins.
• Use this page to tighten access without blocking operational tasks.

Environment setting

• The login flow expects the YUI_SUPER_ADMIN_HASH environment value to be configured.
• Keep that secret out of the repository and aligned with the deployment environment.