I just discovered quite by accident that the security for the checkinmanager page is set to allow "All Users" to view it. That appears to give access to anyone who knows the address to arbitrarily close rooms and get contact information for checked-in kids.

This is easy enough to fix by going to CMS -> Sites and clicking on the lock but it doesn't seem the best default if I'm correct and I thought you might want to change it in newer versions - maybe add something to the admin checklist to have people set the way they want it, for existing installations...?

Thanks!