PacificEMIS / Pacific-SIS

1 stars 3 forks source link

Search All Schools restricted to the schools the person searching as access to #613

Open ghachey opened 1 year ago

ghachey commented 1 year ago

This is a proposed enhancement for discussion. Currently a user can use "Search All Schools" to retrieve students, teachers, etc. from all schools of the system. This is not ideal as people with no access to other schools are now able to retrieve students they normally would not be able to access. This could be done maliciously or by accident. A refined version of this would be to "Search All Schools" for which a user as at least some level of access (like student viewing, teacher viewing, etc.) This would also have the benefit of reducing results sets in large databases. For example, a user (say a district data manager) that has access to the following schools:

Would be able to re-enroll inactive grade 8 students that were selected to not enroll in next year from Elementary Schools A and B by using the "Search All Schools". But a user from another completely unrelated school without access to those schools would not see those students even if using "Search All Schools".

ghachey commented 1 year ago

As a temporary easier solution to our problem I proposed what is detailed in https://github.com/PacificEMIS/Pacific-SIS/issues/615