1

Re: User Configuration

Hi

My user configuration access levels don't seem to be working.

I want to set it so that the user e.g. Sarah Smith, can edit the surveys that she is responsible for but no others. So I set Sarah as Full Edit and ticked the 5 surveys that she was responsible for. However, when she logs in she can edit everything.

I have checked this with other users and they are the same.

What could be going wrong?

Many thanks
Kathryn

2

Re: User Configuration

Sarah should  only be able to see the 5 Surveys in the Observation hierarchy and would therefore be limited to viewing/editing these. Have you set up any  Survey tags as these can affect the way the access levels work ?

Mike Weideli

3

Re: User Configuration

Hi

Thanks for your response. Yes, we have set up survey tags.

When Sarah was first set up as a user she could only see the 5 surveys (in a simple list) which I had previously ticked in the User Configuration window. And presumably she could edit them (though we did not check this at the time).

The tag folder was not showing, so I set her view of Recorder so that it was, i.e Right click on survey icon > Configure > General tab - Organise Surveys by Tag. Then all the surveys in the database appeared in their survey tag folders. But then she could edit everything.

Ideally, what we want is for data owners like Sarah to be able to view everything, but only edit their own data.

Our plan was that general users (i.e. those with no need to edit) would log onto the system via a generic logon e.g. "CCW All Users" and would only have read only access. They would have to have the survey tags enabled otherwise it is impossible to make sense of the numerous surveys.

So I could turn off the tag option from Sarah's view of Recorder and she could log on as herself for editing, and then log on as CCW All Users if she just wants to view the whole dataset.

However, I can see problems with this.
- it is not very secure - some editors would quickly work out that the only thing stopping them editing was the survey tag option.
- some editors (but not all) would need survey tags enabled anyway because they edit different types of surveys
- they would need the survey tags on anyway when they log in as CCW All User - can this be set independently?
- if I turn Sarah's survey tag option off and she does a query on the 5 surveys, does it just apply to them or to the whole database.

Any ideas that might help, please?
Many thanks,
Kath

4

Re: User Configuration

We can look at doings something with the tag option in the next release. Not sure what we can do, but will look into it. The  report wizard and the system supplied XML reports take account of the user configuration restrictions and will include only the Surveys which the user (Sarah) has access to. This will apply even if the tag option is turned on. .

Mike Weideli

5

Re: User Configuration

Yes, please. I think it is important that this issue is looked into as a priority, as at the moment is quite a serious security loophole in the system.

I will raise it with JNCC directly too.

I'd be grateful if you could keep me informed on progress.

Many thanks

Kathryn

6

Re: User Configuration

For what it's worth: http://forums.nbn.org.uk/viewtopic.php?id=1723

Charlie Barnes
Information Officer
Greater Lincolnshire Nature Partnership