Closed kreinhardt closed 7 years ago
just following up on this
Here are the three roles:
Superuser is superuser :)
Data viewing
Data entry and viewing - All data viewing roles
Add/Update Data Value
Delete Data Value
See Dashboard integration module
See Data Entry module
See SUN PMT module
Add/Update Tracked Entity Data Value
Delete Tracked Entity Data Value
Add/Update Private Data Element Category Option
Add/Update Public Data Element Category Option
Add/Update Private Data Element Category
Add/Update Public Data Element Category
Add/Update Private Data Element Category Combo
Add/Update Public Data Element Category Combo
Add/Update Private Option Set
Add/Update Public Option Set
Access to all data sets and programs.
A modular approach to implement this is to create the three (actually two excluding the superuser) roles. Then for data entry and view users assign them both data view and data entry roles.
Thanks for this. When creating the roles do I need to set the data sets and programs?
And, for the last point about the modular approach - do you mean that I can create the data entry role without the data viewing aspects - then assign the two roles to the users with viewing and entry privileges?
Yes, when creating the roles you need to assign data sets and programs.
Re: the modular approach: Yes, that way you can reuse the roles for other groups of users.
Great - thanks.
For the data entry and viewing role - I can't find "see SUN PMT module" on the list.
oh sorry, I thought I have fixed that.
User "M_dhis-web-action-mapping" for now. I will update the server later.
Ok! thanks
found it.
another question - I created a user with viewing privileges, however when I logged on as that user I was not able to see the dashboard that I had created as the admin. Why is this?
oh yes, you need to share those dashboards (and dashboard items) to the user (through its user group and also orgunit).
click the gear icon on the dashboard
then you can choose for which users (belonging to a give org uni) to share your dashboard.
You can also go to Favorites (in the outputs module) and the share ... and decide for which user (through user group) to share
alternatively you can also use the share button on the dashboard
Unlike the sharing of the entire selected dashboard for anyone from a given orgunit (the one you can do through the gear icon), the share button allows you to share based on user group.
Great - thanks.
From the share button - I also just selected public view with login / can edit. It seemed to work for my demo user I created. But are there any issues or limitations that I should be aware of with this method?
Hi @abyot - can you send me the user role definitions for the 3 roles your described (superuser, data entry and viewing, and just data viewing)?