Closed allanaaa closed 1 year ago
An interesting question. Perhaps researchers should only have access to read collecting forms if they have site viewer permission. Right now access is determined by whether the site is public. I think for now I'm going to close this since no one has complained that the permissions are too lenient, .
My audit of module behaviour shows this one appears in the sidebar even when a user role / site user role should not display it. In this test, a Researcher role who has no permissions on the displayed site is able to see this:
You get the "Collecting Forms "This site has no collecting forms."
page with no buttons. Not sure what the intended behaviour is - perhaps people who are not assigned to a site should still be able to, I dunno, do some moderation on this page? So if this is working as intended, feel free to close this. Thanks!