search

mapseed / api

Legacy api for the Mapseed platform
https://mapseed.org
GNU General Public License v3.0
7 stars 7 forks source link

Transmit private data to logged-in admins? #85

Open goldpbear opened 7 years ago

goldpbear commented 7 years ago

Currently, when a form field is prefixed with private- (such as private-submitted_email), the data associated with the field won't be sent from the API to the client. This is useful for keeping sensitive user information safe.

But it also means that logged-in editors cannot edit private form fields in the application's editor. Do we want to give editors the ability to edit private data? If so, I think it will require changes on the API side.

@futuresoup -- do you think there's a strong use case for this?

goldpbear commented 7 years ago

Hmm now that I think about this some more I realize we'd have to grant private data access to all admin groups, or we'd have to implement a new kind of private data access permission which we can selectively apply to datasets groups. That might be more trouble than it's worth.