SORMAS-Foundation / SORMAS-Project

SORMAS (Surveillance, Outbreak Response Management and Analysis System) is an early warning and management system to fight the spread of infectious diseases.
https://sormas.org
GNU General Public License v3.0
293 stars 142 forks source link

user role with limitations on export, run statistics and access to sample results #2229

Open Iheanacho2027 opened 4 years ago

Iheanacho2027 commented 4 years ago

Situation Description

Currently we have situations where states in Nigeria get data entry clerks to speed up data entry, but are very concerned about data entry clerks leaking the data to external sources

Feature Description

We need a user account that prevents the user from exporting, running statistics and viewing sample results. We can have a situation where the user can only do a detailed line list entry of cases and contacts as suggested in #1857 without being able to do the normal navigation case-based entry

@MartinWahnschaffeSymeda @MateStrysewskeSym @Chinedar @foyiri @hzi-old @bernardsilenou

Possible Alternatives

Additional Information

MartinWahnschaffe commented 4 years ago

@Iheanacho2027 Thanks for the input. Can you do a check on https://github.com/hzi-braunschweig/SORMAS-Project/blob/development/sormas-backend/doc/UserDataAccess.md and let us know which user rights the uer role should have and which jurisdiction (national, region, district) they belong to?

bernardsilenou commented 4 years ago

We need a user account that prevents the user from export, run statistics and view sample results. We can have a situation where the user can only do a detailed line list entry of cases and contacts as suggested in #1857 without being able to do the normal navigation case-based entry

@Iheanacho2027 This user role is really limited, creating a user who can only create cases with limited variables is not a good ideas to me. Preventing them from exporting any form of data is a good point. Do we not already have a state user role who cannot export data? Preventing them from using statistics is not a good point because statistics section does not export data from sormas.

Iheanacho2027 commented 4 years ago

@bernardsilenou thats why i asked for the implementation of #1857 so they can create cases with a full linelist method. Secondly, all state user roles can export data except a state observer who cant enter cases and do export data Finally, the reason behind the statistics is that they can export statistics data and share with the public

Iheanacho2027 commented 4 years ago

@MartinWahnschaffeSymeda For now we can begin with the region as the jurisdiction because thats where they are urgently required at the moment. The user shouldnt be able to export all data on cases, contacts and statistics, and shouldnt also be able to view sample results and final classification. If implementing #1857 would be difficult or impossible, then for a start, we can allow the user to enter cases using the normal case entry mode, and the focus should be on preventing the user from exporting data from case, contact, samples directory and statistics menu

bernardsilenou commented 4 years ago

Maybe we add a state user role who can only do the what you mentioned. I suggest we call it state informant. @Iheanacho2027 can you attach the user right excel file with the rights for this user?