BunStackDocs

Customers & GDPR

Access groups and private storefronts

Groups of customers, private storefronts that let members in with a one-time code, the limits and the exception for consumer purchases.

Last updated · 5 min read

A private storefront lets in only customers in an access group.

Where: Customers › Access groups for the groups. Storefronts › [storefront] › Access for the storefront.

Create a group

  1. Open Access groups.
  2. Press New group.
  3. Fill in the fields.
  4. Press Create group.
FieldWhat it doesLimits
NameThe group's name–
SlugMade from the nameCannot change once the group exists
Description (optional)Text on the group's card–
Rule note (for your own reference)A note for you, for example "Approved resellers". It controls nothing–
Stamp label (optional)Short label on the group's cardAt most 10 characters, capitals
ColorThe dot beside the group's name6 colours

The line at the top counts groups, memberships and how many private storefronts the groups gate.

Add members

  1. Press Members on the group's card.
  2. Search by email or name.
  3. Press a customer to add or remove them.

The search shows at most 50 matches. The list shows at most 200 members. Search to find the rest.

Add a list

With many members, a club's member list for example, add them all at once.

  1. Press Add a list on the group's card, or in Members.
  2. Paste the addresses, or press Choose file and pick a CSV or text file.
  3. Check the line under the box: the number of addresses, repeats and words that are not addresses.
  4. Press Add N addresses.

BunStack reads only the email addresses. Names, headers and other columns are skipped. An address without a customer card gets one, with no name. Nobody gets an email.

LimitValue
Addresses per list5,000
File size2 MB

If the import stops part-way, admin shows what was added. Run the same list again. What is already in is skipped.

You can also add the customer from the customer card. Add to group adds and × on the group's label removes. Manage → opens Access groups.

Change or delete a group

⋯ › Edit changes the group. Save with Save changes. ⋯ › Delete deletes it after you confirm. The dialog says what happens, for example 42 members lose access to Pro shop (private) within 15 minutes. Customer records are kept.

Gates on the group's card lists each linked storefront:

LabelMeans
· privateThe storefront is private, and the group lets members in
· public, not gatedThe storefront is open. The link does nothing

If your role does not allow a change, nothing changes, and the page shows, for example, Nothing was saved — your role may not allow editing access groups.

Make a storefront private

  1. Open Storefronts › [storefront] › Access.
  2. Link one or more groups in the Access groups · gating card.
  3. Choose Private — gated under Access mode.

The mode takes effect in the storefront within a minute. It locks the whole storefront, cart and checkout included. Anyone not let in sees the members page.

StampMeans
N LINKEDNumber of linked groups
NOBODYThe storefront is private without a linked group. Nobody gets in
OPEN TO ALLThe storefront is public

Test access checks an address. Type the email and press Check. The answer is ALLOWED or BLOCKED.

Warning: Your admin sign-in does not let you in. Add your own email as a customer in a linked group before you make the storefront private.

How the customer signs in

  1. The customer types their email on the members page.
  2. The customer gets a six-digit code by email.
  3. The customer types the code.

The customer is then signed in for 30 days in that browser. An address that is in no linked group gets the same message as a member, but no email.

LimitValue
Code validity10 minutes
Attempts per code5
Codes per address3 per 10 minutes
Code requests per IP address10 per minute
Code attempts per address10 per minute
Removed from every linked groupShut out within 15 minutes

Over a limit, the page asks the visitor to wait a few minutes.

Exception for consumer purchases

A storefront with Sells to consumers on keeps these pages open without a code:

  • the order lookup /orders
  • the withdrawal function /orders/withdraw
  • the order page and the return and withdrawal pages
  • the withdrawal page for orders from a previous shop, /orders/withdraw/earlier

A buyer can then always withdraw or return without signing in. The pages show nothing from the catalogue. An order shows only with order number and email or through the link in the order email. The members page links to the withdrawal function with Ångra avtalet här / Withdraw from contract here. The Access mode card then shows This shop is private: /orders and the return and withdrawal pages open without the members’ code. The switch is under Storefronts › Returns, see Right of withdrawal and Ångra köp.

See also