dhis2-devs team mailing list archive

[Archana Chillala <archanac@xxxxxxxxxxxxxxxx>]

Okay. Thank you, Busoye.

Archana Chillala
Application Developer
Email archanac@xxxxxxxxxxxxxxxx
Telephone +91 9100960533 <+91+9100960533>
[image: ThoughtWorks]
<http://www.thoughtworks.com/?utm_campaign=archana-chillala-signature&utm_medium=email&utm_source=thoughtworks-email-signature-generator>

On Wed, Aug 17, 2016 at 1:49 PM, Busoye Anifalaje <busoye@xxxxxxxxxxxxxx>
wrote:

> Hi Archana,
>
> This is expected behaviour with the ‘ALL’ authority. You would not be able
> to restrict access to most objects created for a user with All authority in
> their user role. This is what distinguishes the default Superuser role from
> the rest.
>
> The only instance I am aware of that the All authority is restricted by
> default is with Dashboard created as private.
>
> I think the idea is that the All authority allows a sys admin to
> troubleshoot most issues without having to request access from a user that
> might either not be able to provide the access required or does not know
> how to.
>
>
> Hope that helps.
>
> Regards,
>
> - -
>
>
> *Busoye Anifalaje (PhD)*
> Director of Services (Principal), BAO Systems
> UK: +44 7901-740-757 | US: +1 682-307-0986|
>  busoye@xxxxxxxxxxxxxx | http://www.baosystems.com |
> Skype: busoye | 2900 K Street, Suite 404, Washington D.C. 20007
>
> On 17 Aug 2016, at 07:31, Archana Chillala <archanac@xxxxxxxxxxxxxxxx>
> wrote:
>
> Hi,
>
> We are working on DHIS version 2.24 (revision - 23565). We are testing the
> behaviour of restricting data Sets through User Roles. We have created a
> user role with all the authorities, except 'ALL' authority. And did not
> assign any data Sets to this user role. Then we assigned the role to a
> user. So, when the user is logged in, and opens data entry app, and goes to
> the right organisation unit where that particular data set is assigned to,
> the user cannot find any data sets. This is the expected behaviour.
> However, we modified the user role, by giving only the 'ALL' authority now
> (no other authorities are given). And tested the same again. Now, the user
> is able to see the data set in the data entry app, even if the data set is
> not assigned to the user role. Is this expected of the user who has "ALL"
> authority? Or a bug?
>
> Any help here would be appreciated.
>
>
> Archana Chillala
> Application Developer
> Email archanac@xxxxxxxxxxxxxxxx
> Telephone +91 9100960533 <+91+9100960533>
> [image: ThoughtWorks]
> <http://www.thoughtworks.com/?utm_campaign=archana-chillala-signature&utm_medium=email&utm_source=thoughtworks-email-signature-generator>
> _______________________________________________
> Mailing list: https://launchpad.net/~dhis2-devs
> Post to     : dhis2-devs@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-devs
> More help   : https://help.launchpad.net/ListHelp
>
>
>