search

tbar0970 / jethro-pmm

Jethro Pastoral Ministry Manager
GNU General Public License v3.0
36 stars 26 forks source link

Grant access to mark attendance without access to see all person fields #620

Open jefft opened 5 years ago

jefft commented 5 years ago

Our church runs a bunch of bible studies in small groups. Each bible study leader is asked to mark attendance in Jethro. We also have people tasked with recording attendance of church services.

Each 'attendance recorder' person needs a full 'staff' account to Jethro with the 'Attendance - record' permission. This allows them to see all the personal details of users they are marking attendance of. For the '4pm congregation' attendance marker, for instance, that means virtually everyone. This is an unnecessary privacy risk: it should be possible to mark attendance without being able to see details of attendees.

Perhaps Jethro needs an explicit 'Persons & Families - view and report' permission, that could be revoked from users who only need 'Attendance - record'.

tbar0970 commented 5 years ago

Obviously the attendance recorder needs to see people's first name, last name, probably gender and age bracket. But since you have lots of custom fields I can see how that's opening up more than you'd want.