Access Rule - serenapotts/lifeforachild GitHub Wiki
Introduction
This section will outline the different users in the application, and the access permissions associated to that particular user type.
User Types
- Program Manager (Graham)
- Program Manager's Assistants
- Data Entry Operators
- Centre Manager - Will manage all centres in their country
- Centre Admins - Will be the ones managing the users for each individual centre
- Centre Staff
- Researchers
Permission Matrix
See Database access Feb 1b.xls
for latest matrix.
Questions
Medical Records
- Can a child's existing medical records be edited? If so can anyone edit them?
Answers from Graham: Yes, anyone with access, but there will need to be a log of such changes
- Can any centre user/program manager/PM's assistants/data entry operators edit them?
Answers from Graham: see above and below
- Is a child's registration record locked after a certain amount of time has passed since it was created/last modified?
Answers from Graham: no, but there would need to be a log - in fact a log for the registration pages and another log for the medical record pages would be good
- Is a child's medical record locked after a certain amount of time has passed since it was created/last modified?
Answers from Graham: Not at present - maybe we will develop this after a couple of years - can we introduce that then or should we have a code and say 3 years now?
Data Entry Operators
From the requirements:
Other approved Data Enterers (if needed) will only have access to the data sheets that they are entering, and the previous data from that country (so they can properly link longitudinal patient data
- Do the data entry operators only have access to just the one ACDS sheet that they're currently working on?
Answers from Graham: Yes I think so (I need to think through more) - see table attached
- Can they edit existing data sheets?
Answers from Graham: Yes - see above
- What previous data can they access and how do they access this? Is it like the reports that researchers can access? Is it just previous data for the same child?
Answers from Graham: (haven't got an answer)
Researchers
- Can researchers access fully deidentified records for all sites? Or are they restricted to a particular site or a list of sites?
Answers from Graham: Researchers will be very limited - see table attached- we will generally give exported data to them
- Can researchers be restricted access to selected children? Or just one child?
Answers from Graham: Researchers will be very limited - see table attached - we will generally give exported data to them
Individual Centres
From the requirements:
Individual centres will only be able to see data from their centre, and will determine who in their centre has that access.
- Are there many levels of access? Or is it just Centre Admin and Centre Staff?
Answers from Graham: I have put in a Country Manager line
- Can different Centre Staff have different sets of permissions?
Answers from Graham: (haven't got an answer)