• Resolved AdamJH

    (@adamjh)


    https://x.com/Making8/status/1853466573438153048/photo/1

    Overlapping interstitial doesn’t allow for Google Site Kit to request appropriate access or alternate Workspace account. Should be able to generate txt file and alternate GA account easily. This is a very bad and delete worthy experience. Fix it ASAP please!

    A 3rd party has recreated their removed GA account via text record that was still in the DNS. We produced a GA txt file as per GA’s request on DNS elsewhere and the GA doesn’t show.

    The format for date is also unclear here:
    https://support.google.com/analytics/answer/15191460?hl=en&sjid=8925809399400157996-NC

    I think we can agree this is not a good experience and needs immediate attention. It’s been getting exposure lately about how former agencies are deleting business analytics accounts and that’s not ok. Businesses should be able to recover and secure that GA accounts easily without malicious 3rd parties messing with it.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Support James Osborne

    (@jamesosborne)

    Thanks for reaching out @adamjh. We’ll perform some tests on this and report back to you here once complete. Agreed it’s not a great user experience. I suspect there may have been changed to how access can be requested through the service API’s, but I will let you know here once we have more here.

    While we’re testing this, with regards your GA account and DNS, are you referring to initial set up with Site Kit during site verification? This is more a Search Console related verification, and Site Kit will use a meta tag to verify site ownership. If there is an existing verified method active for a domain, that will be used.

    Let me know if you have any questions with the above. Thank you.

    Thread Starter AdamJH

    (@adamjh)

    Actually, in this case, it’s from a malicious former 3rd party the client terminated that was able to recover their account access from a txt file still in the DNS. We were able to upload or DNS txt but do not see our GA account. We also see in the Site Kite interface the former malcious actor’s name still sitting in there. We should be able to take over the account given we have full DNS and site control. The reporting page for granting GA access issues at Google is also experiencing a bug of which I commented on twitter https://pbs.twimg.com/media/Gbj4vkpWQAAv8Xf?format=jpg&name=medium

    Plugin Support James Osborne

    (@jamesosborne)

    @adamjh Any site administrator (with the full WordPress administrator role) can reset Site Kit if they wish. This will ensure any previously connected Google account is no longer connected, and it will leave you free to connect Site Kit once more to your own Google account, and then choose your preferred Google Analytics account and property that you have access to.

    The reporting page for granting GA access issues at Google is also experiencing a bug of which I commented on twitter?https://pbs.twimg.com/media/Gbj4vkpWQAAv8Xf?format=jpg&name=medium

    While we’re limited to Site Kit support here in the plugin support forums, As long as you have access to the Google Analytics account which you may suspect others of having access to, you can review this from analytics.google.com. For Search Console, you can also review the verification methods in place for any property, and remove any such verification, allowing Site Kit instead to verify site ownership.

    We’re be reviewing for any potential improvements with the grant access feature within Site Kit based on your comments above. Thank you! I’ll keep you updated here with any findings.

    Thread Starter AdamJH

    (@adamjh)

    They can’t with that overlapping interstitial. Once a 3rd party former agency has revoked access there is no clickable options to create a DNS text record or verify ownership visible. You can’t click beyond that overlapping interstitial access over the other to proceed to amend anything like verification of owner.

    Plugin Support James Osborne

    (@jamesosborne)

    Thanks for your patience on this. I’ve been performing some tests on this and while I do encounter some popups positioned above popups, these are from Google Analytics (as highlighted here), which can be accessed via a “Request Access” button from Site Kit. When a user is directed to the Analytics platform in order to request access, it is possible for popups to be placed above the “Request access” button. As you’ll see below, modal popups can appear for product guide throughs or for marketing communications:

    Based on this testing, including recreating the steps to land on the same screenshot as per the tweet you highlighted, the popup experience is something that must be addressed from the Google Analytics side. While I’ll certainly pass on your experience to the team, you may wish to submit feedback to the Google Analytics team also.

    Once a 3rd party former agency has revoked access there is no clickable options to create a DNS text record or verify ownership visible.?

    Site Kit doesn’t generate any DNS records, regardless of whether it’s an access request or an initial plugin setup. Site ownership with Search Console is done over HTML file verification only, and if that fails then a HTML tag method only.

    Let me know if you have any further questions with the above. Thank you.

    Plugin Support James Osborne

    (@jamesosborne)

    As we didn’t receive a response I’ll mark this as resolved. Feel free to open a new support topic if you continue to encounter issues, or reopen this topic and we’d be happy to assist.

Viewing 6 replies - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.