Where to manage blocked access
Open Settings → Security & Visitors. The page has Visitors, Sessions and Blocked access tabs. The Settings card is available in both development and production. Opening the page requires Settings View and Security & Visitors View; blocking or unblocking requires Security & Visitors Edit.
Choose Blocked access to create customer or IP restrictions and review their history. You can also start a block from the Sessions row menu.
Choose customer or IP blocking
A Customer block applies to the selected customer account when identified, across devices and networks. An IP address block applies to customer access from that exact IPv4 or IPv6 address, including anonymous visitors. It can affect several people sharing Wi-Fi or another network; moving to another IP is outside that IP block. Blocking an account does not identify the same person browsing anonymously.
Restrictions apply to this business's customer app access, including customer sign-in and booking requests. A blocked customer sees the business as unavailable. This does not delete the customer, cancel existing reservations, refund payments or stop recurring billing. It is not a platform-wide firewall rule, and it does not block admin API access or payment callbacks.
Create a restriction
- Click Block access.
- Choose Customer or IP address and select the customer or enter the exact IP address.
- Select 1 hour, 1 day, 7 days or 30 days. Customer blocks also support Until unblocked; IP blocks must expire.
- Enter a reason in Notes (required, up to 500 characters), review the target and save.
You cannot block your own account, a customer with an active staff/instructor role, or the support account. You cannot block the IP address you are currently using. An existing active restriction on the same target prevents a duplicate. To change the duration or reason, unblock the existing restriction and create a new one; there is no edit action on an existing row.
Search and read the restriction table
The default Status filter is Active. Choose History for expired or manually unblocked restrictions, or All to include both. Search by customer name, email, IP address or reason.
The table shows the target, Status, Reason, Created, Expires, Created by, Unblocked and Unblocked by. A customer restriction with no expiry remains until manually unblocked. Expired means its time limit ended; Unblocked means it was removed manually. History keeps the original restriction for review. A historical Blocked badge on a session is not the current status of the restriction.
Unblock and restore access
For an Active row, open the three-dot menu, choose Unblock and confirm. You need Edit permission. The row remains in History with who unblocked it and when. Timed restrictions stop applying when their expiry is reached; no manual unblock or scheduled cleanup is needed.
If access is still denied, check All or Active for another restriction: removing a customer block does not remove a separate IP block, and removing an IP block does not remove a separate customer block. Check that the customer is opening the correct business.
If the customer can sign in but cannot make new bookings, that is usually a booking lock from Lock customer access (repeated no-shows or late cancellations), not an access block. Booking locks are managed from the customer's actions on the Users page — see How to unlock a locked-out customer.
Who can view, block and unblock
Security & Visitors is a permission under Settings, not a separate role. Account Admin has Edit by default; Manager, Instructor and Salesperson do not have it by default. To grant access, open Settings → Roles and permissions → Manage roles, open the intended role, grant Settings View, then set Security & Visitors to View or Edit and save. View permits visitor charts, sessions, event details and restriction history. Edit is required to create or remove restrictions. Granting View does not authorize blocking, even if a block action is visible.
