Access Permissions

Kobo On Your Own Server
, ,
21

@kh1, pinging @stephenoduor and @ks_1 for your support!

22

much appreciated @Kal_Lam

1 Like
23

@kh1
The first thing Iā€™d do is to check the permissions granted to those users in the Django admin panel.

1 Like
24

i havenā€™t given them anything in the django panel, which do i need to give? just so the contractors can view the projects, fill in the forms and submit the data?

25

@ks_1 if you wanna chat in DM i can explain the issues further and discuss the matter and then return here with the solution you found? perhaps

26

@kh1, having a public discussion would benefit the entire community. Going private is something you may have to do when you need to share confidential matters.

27

@Kal_Lam yeah i would share the matter once a solution has been identified :slight_smile:

1 Like
28

IF i add all django permissions, contractors can see the form as intended but i donā€™t want them to be able to clone or have the permissions under more options, so disabling these options? is done? how

image

29

As far as I know itā€™s not possible to disable form cloning and viewing permissions specifically.

1 Like
30

so i cannot disable cloning for a user group and the removal of the shared form from a user with lowest access permissions?

that would be a vulnerability for my company

31

by adding all of the Django permissions and then removing categories at a time to see which section revealed the forms/project got narrowed down to KPI area BUT these contractors shouldnā€™t be able to delete nor clone the forms

this is the django permissions the contractors have ā€¦

image

32

Try this:
image

1 Like
33

that works, can no longer clone but can still remove themselves from forms

all 4 forms show on super_admin but only 3 on contractor

edit - re added in sharing permissions of the form

1 Like
34

You can remove deletion permissions from the Settings > Sharing tab.

1 Like
35

this is a contractors settings on settings > sharing

image
image1004Ɨ83 2.11 KB

but still as a contractor they have this option

image

remove shared form

36

Even after changing the permissions for the user to this?

37

yes thatā€™s all the permissions they have in the django admin area

38

Is there a way to remove this option at all?

image

39

had a chat with my boss yesterday to check in with my progress who wants me to complete this project and did state that, that the option for the contractor to remove themselves from forms needs to be disabled because building contractors and site managers would click these things having the option there to get out of filling in paperwork (these forms)

the plan is also in time because i can see potential that the finance department can get involved in this toolbox also when permissions can be revoked so they can only see what they need to see.

if someone knows how to achieve this please let me know

thanks

40

IF a new role wants these roles but also wants to view submissions they have done and others within the same role which additional permissions are needed? :slight_smile: