# Security & privacy

### Connection security

All data sent to or from SETLS is protected by [TLS 1.2](https://en.wikipedia.org/wiki/Transport_Layer_Security) or above. This provides the same level of security as online banking, government and other sites.

### Authentication & password management

SETLS uses form-based authentication where the password is sent as a POST parameter. The password is transmitted securely using TLS.

Passwords are stored in the database as a [salted hash](https://auth0.com/blog/adding-salt-to-hashing-a-better-way-to-store-passwords/), and cannot be retrieved by the SETLS team. Passwords can be reset by any user with administrative permissions by

- sending a password reset email to the member, or
- manually entering the new password

After checking the password, SETLS creates a cryptographically-secure session cookie. This is used to identify the user when they return to SETLS using the same device, so they do not need to log in again.

A user with administrative permissions can remove a logged-in session, or reset the user's password. Both actions will require the user to enter their password the next time they access SETLS.

### Email configuration

SETLS sends emails to members or toy library staff for a variety of reasons, including:

- reminders to return items or attend volunteer sessions
- notifications that a held item is available or membership fees are due

A full list of the automatic emails can be found in the [demonstration system](https://sampletoylibrary.setls.com.au/automatic_emails).

Emails are sent with a "from" address of [noreply@&lt;toylibrary&gt;.setls.com.au.](mailto:noreply@<toylibrary>.setls.com.au,) The "reply to" address can be set from the [settings page](https://sampletoylibrary.setls.com.au/toy_library_settings).

Emails from SETLS are sent via Amazon Simple Email Services (SES). You do not need to provide SETLS with access to your mail server or a relay.

### Sensitive information

SETLS can be used to record information about members that may be considered sensitive. This information includes:

<table border="1" id="bkmrk-member-details-name-" style="border-collapse: collapse; width: 100%; height: 205px;"><tbody><tr style="height: 36px;"><td style="width: 19.0124%; height: 36px;">**Member details**</td><td style="width: 24.8456%; height: 36px;">*Name*

</td><td style="width: 20.1543%; height: 36px;">*Required*

</td></tr><tr style="height: 35px;"><td style="width: 19.0124%; height: 35px;">  
</td><td style="width: 24.8456%; height: 35px;">Email

</td><td style="width: 20.1543%; height: 35px;">Optional, required for online access

</td></tr><tr style="height: 35px;"><td style="width: 19.0124%; height: 35px;">  
</td><td style="width: 24.8456%; height: 35px;">Mobile phone

</td><td style="width: 20.1543%; height: 35px;">Optional, required for SMS

</td></tr><tr style="height: 35px;"><td style="width: 19.0124%; height: 35px;">**Home address**</td><td style="width: 24.8456%; height: 35px;">Street, suburb and phone

</td><td style="width: 20.1543%; height: 35px;">Optional

</td></tr><tr style="height: 35px;"><td style="width: 19.0124%; height: 35px;">**Alternate contact**</td><td style="width: 24.8456%; height: 35px;">Name, address and phone

</td><td style="width: 20.1543%; height: 35px;">Optional

</td></tr><tr style="height: 29px;"><td style="width: 19.0124%; height: 29px;">**Identity**</td><td style="width: 24.8456%; height: 29px;">Drivers license number</td><td style="width: 20.1543%; height: 29px;">Optional</td></tr></tbody></table>

The following additional fields can be enabled from the settings page.

<table border="1" id="bkmrk-member-details-date-" style="border-collapse: collapse; width: 100%;"><tbody><tr><td style="width: 29.6297%;">**Member details**</td><td style="width: 70.3703%;">Date of birth  
Healthcare card (checkbox)

Ethnicity

Language

Disability

</td></tr><tr><td style="width: 29.6297%;">**Children**</td><td style="width: 70.3703%;">Name

Date of birth

Gender

</td></tr><tr><td style="width: 29.6297%;">**Organisations (schools)**</td><td style="width: 70.3703%;">Name

</td></tr></tbody></table>

Additional information related to library operations, such as membership type, are also recorded. These can be seen in the [demonstration system.](https://sampletoylibrary.setls.com.au/signup)

### Financial transactions

SETLS can be used to manually record member charges and payments, including membership fees and penalties.

SETLS also supports online payment of membership fees using PayPal. This requires creation of a PayPal account.

The SETLS team are currently investigating integration with Square for online and in-person payments.

### Data validation

SETLS uses model-driven design and all input fields are:

- Type-checked against the database
- Protected from SQL injection using parameterised queries

Many scenarios for business rule checking are covered by workflow operations rather than manual data entry. For example, when loaning an item, the loan and due dates are derived automatically instead of being entered manually.

Model-driven design allows business rules to be centralised in the model rather than being distributed throughout the user interface. Examples include:

- When changing an item location, only valid destinations are available for selection
- When manually updating a loan record, the return date must be on or before the loan date

### SETLS servers

The following service providers are used by SETLS:

<table border="1" id="bkmrk-feature-provider-loc" style="border-collapse: collapse; width: 100%;"><tbody><tr><td style="width: 33.3333%;">**Feature**</td><td style="width: 33.3333%;">**Provider**</td><td style="width: 33.3333%;">**Location**</td></tr><tr><td style="width: 33.3333%;">Web application</td><td style="width: 33.3333%;">Amazon</td><td style="width: 33.3333%;">Sydney, Australia</td></tr><tr><td style="width: 33.3333%;">Database</td><td style="width: 33.3333%;">Amazon</td><td style="width: 33.3333%;">Sydney, Australia</td></tr><tr><td style="width: 33.3333%;">Email</td><td style="width: 33.3333%;">Amazon</td><td style="width: 33.3333%;">Sydney, Australia</td></tr><tr><td style="width: 33.3333%;">SMS</td><td style="width: 33.3333%;">Amazon</td><td style="width: 33.3333%;">Sydney, Australia</td></tr></tbody></table>

The list of IP address ranges currently used by the Amazon is available from [AWS IP address ranges - AWS General Reference (amazon.com)](https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html)

The SETLS database is not currently protected by encryption at rest. This is scheduled to be resolved in 2024.