← Back to team overview

dhis2-devs-core team mailing list archive

Re: Read only access to orgunits

 

Thanks,
Is it possible to create a user with no privileges?

On Thu, Apr 2, 2015 at 6:58 PM, Lars Helge Øverland <larshelge@xxxxxxxxx>
wrote:

> Hi Bob,
>
> yes that is correct.
>
> You can read but of course not create org units without explicit authority.
>
> For most objects we now have "sharing" applied, which means you could make
> that meta-data private (hidden). We do not have sharing for org units due
> to the nature of the hierarchy (would be problematic if some higher-level
> org units were private/hidden).
>
> regards,
>
> Lars
>
>
> On Thu, Apr 2, 2015 at 6:36 PM, Bob Jolliffe <bobjolliffe@xxxxxxxxx>
> wrote:
>
>> Hi
>>
>> I am struggling to find an required authority to create a user which
>> has readonly access to the orgunits.
>>
>> Specifically I want to create an account for a facility registry type
>> client who can read orgunits (+groups, levels, attributes) from the
>> api - and no acces to anything else.  Am I missing something silly?
>> The default seems to be If I create a user with no privileges
>> whatsoever that user has access to the api metadata and resource
>> endpoints.  Is that the way it is?
>>
>> Cheers
>> Bob
>>
>> --
>> Mailing list: https://launchpad.net/~dhis2-devs-core
>> Post to     : dhis2-devs-core@xxxxxxxxxxxxxxxxxxx
>> Unsubscribe : https://launchpad.net/~dhis2-devs-core
>> More help   : https://help.launchpad.net/ListHelp
>>
>
>

Follow ups

References