Restrict access to sensitive data

Answered

Maarten van Schie

February 15, 2021 15:28

We would like to introduce "security self assements" on applications as a questionaire. Those assements are very sensitive. With the current controls on persmissions, i am not able to protect this data from being viewed.

I know there is an option to hide fields for read only user in questionaires , but this still leaves to much people who can see this information and also restricts reporting on this information in table format.

I would like to see an extra option added in the drop down when configuring roles en setting persmissions on objects. We now have, "read only" and "read and write" as a right to set on an object, if you could add an option "no access" we could hide these sensitive objects and related information in the questionaires from the regular users/editors.

This would save us of buying a seperate tool for gathering this kind of sensitive data.

Thanks for considering,
Maarten van Schie | Leiden University

4

• 

  Kim van Rooijen

  February 18, 2021 17:06

  Hi Maarten van Schie, 

  Thanks for your wish! 

  0
• 

  Kim van Rooijen

  March 15, 2021 12:22

  it'll be added to my monthly feedback meeting! 

  0
• 

  Kim van Rooijen

  October 21, 2021 11:30

  Hey! We have added this wish to our list! I cannot share any time-specific information about when we will release this feature but please keep an eye on our release channel here in the community! 

  0
• 

  Maarten van Schie

  September 06, 2022 10:51 Edited

  I'm still waiting for this feature

  It is very important to be able to onboard security, privacy and procurement and their data as the data is too sensitive for all user to acces. 

  
  Can you give an update on this feature request?

  0
• 

  Maarten Stegmann

  January 27, 2023 12:23

  We have the same need for improvement: it should be possible to block entrance to a questionair for certain groups of users. Preferably this also leads to not even showing the tab to this questionair to that group.

  And beware of the use of the API : this does not look at autorisations in BlueDolphin, so anyone with the key to the API can still access the hidden info. Best is not to allow the information from such a quenstionair through the API, until a better solution is worked out.

  0
• 

  Maarten van Schie

  January 27, 2023 13:07

  The wish is still high on my list!

  0

Please sign in to leave a comment.