Limited Access to Work Order and Client Information

[aarontitus]

Original author: v...@aarontitus.net (January 14, 2013 00:54:15)

Currently, all organizations have access to all client data. This needs to change. There should be three levels of access:

• Full Access: Access to all client personal data, all work order data, and geolocation data.
• Limited Access: Access to all work order data, all client personal information EXCEPT that all numbers related to contact information is redacted (e.g. "123 Main St. Apt. A5" becomes "XXX Main St. Apt. AX", and "(987) 654-3210" becomes "(XXX) XXX-XXXX". Only Blurred geolocation data is available, instead of the actual physical location.
• Public Access: A public map showing basic work order data (e.g. the icon illustrating the work order type), and only blurred geolocation data.

An organization has the access to the following types of information:

• Unclaimed Work Orders: Full Access.
• Claimed Work Orders: Full Access.
• Work Orders Claimed by another Organization: Limited Access.
• Work Orders Claimed by an Affiliate, Sister, Parent, or Child organization: Full Access. (See #141)

Members of the Public have Public Access to work orders on the map.

Requires completion of organizational relationships outlined in #141.

Original issue: http://code.google.com/p/sandy-disaster-recovery/issues/detail?id=145

[aarontitus]

From v...@aarontitus.net on January 14, 2013 01:04:08

• Work Orders Reported by the Organization: Full Access.
• Work Orders accessible during the Duplicate Merge process: Full Access.
• Search Function: The search function should search against the entire address/ phone number, rather than the redacted version. So the address "123 Main Street" should appear in the search field, even though "XXX Main Street" appears everywhere else. The goal is to try to prevent fraud by mass-exporting all client data, not prevent a volunteer from searching for the client data (especially if they call in and ask for help, but are already in the system).

[aarontitus]

From v...@aarontitus.net on February 22, 2013 13:41:57

89 must be completed prior to this issue- parent/child and affiliate relationships.