jethro-pmm
jethro-pmm copied to clipboard
Access restrictions for custom fields
For sensitive info such as WWCC results, you don't want every user to be able to update values. It would therefore be useful to be able somehow to restrict who can edit certain fields. Simplest approach would probably be another setting on the "custom fields" page " [x] only allow the following people to edit this field: [ multi person chooser ]"
A related, but probably less necessary, feature would be to restrict READ access for fields too: " [x] only allow the following people to view this field: [ multi person chooser ]"
This functionality would be extremely helpful - particularly limiting the READ access for custom fields - this would allow sensitive field information (such as DBS update info) to be visible only to those who need it. Currently this information can't be stored on Jethro, without all users who have access to a particular person seeing it. It would also be useful to restrict user READ access to particular notes (e.g. sensitive info about previous mental health conditions- i.e. data that has to be asked before someone can work with children, but data that clearly needs to have very limited access, for only a few users).
+1
+1
Another possible approach: Allow fields to be marked as "sensitive", and make sensitive fields only editable/visible to people with notes access.
(However this then collides a bit with Zoe's idea comment above including certain notes that are "sensitive")