How come a regular user with View and Add submissions has access to Version control and Collect data method?

User Support Data Management
,
1

Hey there,
While doing some testing, I noticed something strange.

As a project admin, I have one form, and it’s shared with a lot of users, one being this person (let’s call him “Subject I”):

Admin perspective
Admin perspective1506×1376 199 KB

It just so happens that “Subject I” belongs to me (it’s a test account, and it’s entirely separate account from the admin).
What caught my attention is that “Subject I” is allowed to:

  1. Version control (show full history) - download any version of the form.
  2. Change the collect data method (online-offline, etc).

Subject I's perspective
Subject I's perspective3024×1682 210 KB

Is this normal?!

2

@ivanradisson, this is because your account says Subject1 has access to View form and Add submissions.

3

Hey @Kal_Lam :slightly_smiling_face:

How can downloading the original form (basically exposing the form logic for the users to replicate for free), and messing around in the collect data setting (which affects the project for everyone, if I understand correctly) be available to any user who has view form and add submission permissions?

This makes no sense… maybe there’s something I’m missing. Can you help clarify?

5

@Alex410

What do you mean? :slight_smile: