jethro-pmm icon indicating copy to clipboard operation
jethro-pmm copied to clipboard

Access restrictions for custom fields

Open tbar0970 opened this issue 6 years ago • 4 comments

For sensitive info such as WWCC results, you don't want every user to be able to update values. It would therefore be useful to be able somehow to restrict who can edit certain fields. Simplest approach would probably be another setting on the "custom fields" page " [x] only allow the following people to edit this field: [ multi person chooser ]"

A related, but probably less necessary, feature would be to restrict READ access for fields too: " [x] only allow the following people to view this field: [ multi person chooser ]"

tbar0970 avatar Sep 17 '18 11:09 tbar0970

This functionality would be extremely helpful - particularly limiting the READ access for custom fields - this would allow sensitive field information (such as DBS update info) to be visible only to those who need it. Currently this information can't be stored on Jethro, without all users who have access to a particular person seeing it. It would also be useful to restrict user READ access to particular notes (e.g. sensitive info about previous mental health conditions- i.e. data that has to be asked before someone can work with children, but data that clearly needs to have very limited access, for only a few users).

gatesheadzoe avatar Oct 14 '18 07:10 gatesheadzoe

+1

tbar0970 avatar Sep 22 '20 04:09 tbar0970

+1

tbar0970 avatar Apr 15 '22 22:04 tbar0970

Another possible approach: Allow fields to be marked as "sensitive", and make sensitive fields only editable/visible to people with notes access.

(However this then collides a bit with Zoe's idea comment above including certain notes that are "sensitive")

tbar0970 avatar Apr 15 '22 22:04 tbar0970