Web · Released October 2026
Revoke and restore access 🚫
A Super Admin can now stop a staff member or a parent from signing in, straight away, and let them back in later.Immediate
The person is signed out everywhere and blocked from every way of signing in: password, emailed code or sign-in link.
Quiet and recorded
They are not told. Your records keep who revoked access, when, and the reason you typed.
- Find the person under Staff & Users, in the Staff or Guardians tab, and choose Revoke access. Choose Restore access to let them back.
- It works for schools and sports clubs.
- A child can never be left without a guardian, and you cannot revoke yourself or the last Super Admin.
- A revoked parent stays on the child’s record but gets no emails or notifications and cannot see the child’s information. They stay flagged if the child’s record is edited or re-created.
- Revoke access replaces the old Deactivate button on the staff list.
Safer sign-in 🔐
- Too many wrong passwords. After 5 wrong passwords for the same account within 15 minutes, sign-in pauses for that account and the page tells the person to try again in 15 minutes. Other accounts are not affected, and correct sign-ins never count.
- More than one organisation in the same browser. You can be signed in to two organisations at once, each in its own tab, and they no longer overwrite each other. Each tab stays on the organisation it signed in to, and signs itself out rather than show another organisation’s information.
- Safer redirects. Sign-in links only ever return you to mymeddiCAL.
Everyone was signed out once when this update went live. Sign in again as normal.