dhis2-devs-core team mailing list archive
-
dhis2-devs-core team
-
Mailing list archive
-
Message #00389
Re: Read only access to orgunits
Thanks,
Is it possible to create a user with no privileges?
On Thu, Apr 2, 2015 at 6:58 PM, Lars Helge Øverland <larshelge@xxxxxxxxx>
wrote:
> Hi Bob,
>
> yes that is correct.
>
> You can read but of course not create org units without explicit authority.
>
> For most objects we now have "sharing" applied, which means you could make
> that meta-data private (hidden). We do not have sharing for org units due
> to the nature of the hierarchy (would be problematic if some higher-level
> org units were private/hidden).
>
> regards,
>
> Lars
>
>
> On Thu, Apr 2, 2015 at 6:36 PM, Bob Jolliffe <bobjolliffe@xxxxxxxxx>
> wrote:
>
>> Hi
>>
>> I am struggling to find an required authority to create a user which
>> has readonly access to the orgunits.
>>
>> Specifically I want to create an account for a facility registry type
>> client who can read orgunits (+groups, levels, attributes) from the
>> api - and no acces to anything else. Am I missing something silly?
>> The default seems to be If I create a user with no privileges
>> whatsoever that user has access to the api metadata and resource
>> endpoints. Is that the way it is?
>>
>> Cheers
>> Bob
>>
>> --
>> Mailing list: https://launchpad.net/~dhis2-devs-core
>> Post to : dhis2-devs-core@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~dhis2-devs-core
>> More help : https://help.launchpad.net/ListHelp
>>
>
>
Follow ups
References