Visible session approval
Incoming access requests must be actively approved by the remote computer user unless they explicitly configure unattended access in a later version.
Control should always be explicit.
These are product security requirements for the future remote desktop engine. The web portal uses Laravel's session and authentication protections.
Encrypted transport
The live session transport must be encrypted and authenticated before the desktop engine ships.
Easy disconnect
Remote users must always have a visible indicator and a fast, accessible disconnect control.
Abuse prevention
Quotas, rate limits, abuse reports, consent and operator response processes are planned as release gates.
Separate applications
The remote product uses an isolated portal, database and infrastructure, separate from the Baabiha Digital site.
No hidden viewing
The public client must not provide covert screen access or invisible unattended sessions.