dhis2-devs team mailing list archive

[Jason Pickering <jason.p.pickering@xxxxxxxxx>]

Hi Georgi,

To be most specific I think, you will need to use the "Attribute option
combo" to control who can see what. This is basically a way to disaggregate
data by a custom dimension, in this case, by an investor group. Its often
used in situations where multiple partners are entering data for the same
health facility, but you do not want one partner to be able to see another
partners data.  Once you disaggregate your data set this way, you can then
use sharing to control who can see what, by only sharing the category
option which is applicable to a given user, with that user.  Each investor
would need to be belong to a common group with "their" category option. You
would then need to restrict users in their user role  with "Selected
dimension restrictions for data analytics" as well.

This type of setup can get complex quickly, but has been used in larger
implementations (i.e with the PEPFAR system) , but usually only when the
groups are properly designed and the creation of users is done in a
scripted way, to ensure that all of the permissions are set correctly.

Hope that helps!

Jason


On Thu, May 4, 2017 at 12:58 PM, Antonia - Pro <antonia@xxxxxxxxxxx> wrote:

> Exactly Morten.
> For Dashboards, sharing also works at user level after the last update
> 2.26, but reports (data, event visualizer and reports and pivot tables)
> only work at group level currently (on the demo server).
>
>
> *Eng. Antonia Bezenchek*
> CIO - ICT Engineer
> *InformaPRO S.r.l.* via Guido Guinizelli, 98/100, Roma 00152, Italy
>
>
> 2017-05-04 12:29 GMT+02:00 Morten Olav Hansen <morten@xxxxxxxxx>:
>
>> Hm, I think maybe we support this only for the dashboards, so it might
>> not help you (you can share dashboards directly to users, but reporting
>> apps are not updated for that yet).
>>
>> --
>> Morten Olav Hansen
>> Senior Engineer, DHIS 2
>> University of Oslo
>> http://www.dhis2.org
>>
>> On Thu, May 4, 2017 at 5:28 PM, Antonia - Pro <antonia@xxxxxxxxxxx>
>> wrote:
>>
>>> Permissions for Dashboard and Favorites are managed at the group level,
>>> so if they are not groupable, you need to create a group for each user.
>>>
>>> Regards,
>>> Antonia
>>>
>>>
>>>
>>> 2017-05-04 9:47 GMT+02:00 Georgi Chakarov <georgi@xxxxxxxxxxxxxxxxxxx>:
>>>
>>>> Hi Alex,
>>>>
>>>>
>>>>
>>>> Thanks for the response!
>>>>
>>>>
>>>>
>>>> I have 150 investors and none of them should be able to see the reports
>>>> of the other investors.
>>>>
>>>> Does this mean that I have to create 150 user groups with one investor
>>>> each?
>>>>
>>>>
>>>>
>>>> Regards,
>>>>
>>>>
>>>>
>>>> Georgi
>>>>
>>>>
>>>>
>>>> *From:* Alex Tumwesigye [mailto:atumwesigye@xxxxxxxxx]
>>>> *Sent:* Thursday, May 4, 2017 8:53 AM
>>>> *To:* Georgi Chakarov <georgi@xxxxxxxxxxxxxxxxxxx>
>>>> *Cc:* dhis2-devs@xxxxxxxxxxxxxxxxxxx; dhis2-users@xxxxxxxxxxxxxxxxxxx
>>>> *Subject:* Re: [Dhis2-users] User Authorities and Dashboards
>>>>
>>>>
>>>>
>>>> Dear Georgi,
>>>>
>>>>
>>>>
>>>> The solution is Sharing and User Groups
>>>>
>>>>
>>>>
>>>> Implement the same sharing on each report/chart/gis map as you did on
>>>> the dashboard.
>>>>
>>>> That is Set Public to *None *and then add the Investor User Group
>>>> (which is has access) and set sharing to *View*
>>>>
>>>>
>>>>
>>>> *Alex*
>>>>
>>>>
>>>>
>>>> On Wed, May 3, 2017 at 7:27 PM, Georgi Chakarov <
>>>> georgi@xxxxxxxxxxxxxxxxxxx> wrote:
>>>>
>>>> Hello all,
>>>>
>>>>
>>>>
>>>> I have a big problem setting up the correct authorities so that users
>>>> see what I need them to.
>>>>
>>>> In brief, I am reporting on financial data. I have a few investors for
>>>> whom I have prepared personal dashboards with pivots on how much return
>>>> they have earned. I DO NOT want investors to be able to see each other’s
>>>> data.
>>>>
>>>>
>>>>
>>>> This is what I have done:
>>>>
>>>> 1)      User Authorities:
>>>>
>>>> -          See dashboards
>>>>
>>>> -          See browser cache
>>>>
>>>> -          See pivot table module
>>>>
>>>> *IMPORTANT:* If I remove the “See pivot table module” the users are
>>>> not able to see the saved pivot tables on their dashboard! So I need this
>>>> authority.
>>>>
>>>>
>>>>
>>>> 2)      Dashboards
>>>>
>>>> -          Created personal dashboard for each investor
>>>>
>>>> -          Shared the dashboard only with the respective investor
>>>>
>>>>
>>>>
>>>> Every investor is able to see only their dashboard. Here comes the *BIG
>>>> PROBLEM: *When an investor clicks “Explore” pivot table from the
>>>> dashboard it takes him to the Pivot table app. From there, they can go to
>>>> Favorites and open a saved report for any of the other investors and see
>>>> data.
>>>>
>>>>
>>>>
>>>> Two questions here:
>>>>
>>>> 1)      Is there a way for user to see pivots on a dashboard without
>>>> necessarily having access to the Pivot reporting module?
>>>>
>>>> 2)      If not, is there a way to restrict user of opening reports
>>>> saved as favorites in the Pivot reporting module?
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> Your comments are highly appreciated!
>>>>
>>>> Georgi
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> Georgi Chakarov, CIA | georgi@xxxxxxxxxxxxxxxxxxx | +1-647-478-5634 x
>>>> 104 <(647)%20478-5634> | LogicalOutcomes c/o Centre for Social
>>>> Innovation, 720 Bathurst Street, Toronto Canada M5S 2R4 | *You may
>>>> unsubscribe from receiving commercial electronic messages from
>>>> LogicalOutcomes by emailing **info@xxxxxxxxxxxxxxxxxxx*
>>>> <info@xxxxxxxxxxxxxxxxxxx>
>>>>
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Mailing list: https://launchpad.net/~dhis2-users
>>>> Post to     : dhis2-users@xxxxxxxxxxxxxxxxxxx
>>>> Unsubscribe : https://launchpad.net/~dhis2-users
>>>> More help   : https://help.launchpad.net/ListHelp
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> --
>>>>
>>>> Alex Tumwesigye
>>>>
>>>>
>>>>
>>>> Technical Advisor - DHIS2 (Consultant),
>>>> Ministry of Health/AFENET  | HISP Uganda
>>>>
>>>> Kampala
>>>>
>>>> Uganda
>>>> +256 774149 775, + 256 759 800161 <+256%20759%20800161>
>>>>
>>>> Skype ID: talexie
>>>>
>>>>
>>>> IT Consultant (Servers, Networks and Security, Health Information
>>>> Systems - DHIS2, Disease Outbreak & Surveillance Systems) & Solar Consultant
>>>>
>>>>
>>>> "I don't want to be anything other than what I have been - one tree
>>>> hill "
>>>>
>>>> _______________________________________________
>>>> Mailing list: https://launchpad.net/~dhis2-users
>>>> Post to     : dhis2-users@xxxxxxxxxxxxxxxxxxx
>>>> Unsubscribe : https://launchpad.net/~dhis2-users
>>>> More help   : https://help.launchpad.net/ListHelp
>>>>
>>>>
>>>
>>> _______________________________________________
>>> Mailing list: https://launchpad.net/~dhis2-users
>>> Post to     : dhis2-users@xxxxxxxxxxxxxxxxxxx
>>> Unsubscribe : https://launchpad.net/~dhis2-users
>>> More help   : https://help.launchpad.net/ListHelp
>>>
>>>
>>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~dhis2-users
> Post to     : dhis2-users@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~dhis2-users
> More help   : https://help.launchpad.net/ListHelp
>
>


-- 
Jason P. Pickering
email: jason.p.pickering@xxxxxxxxx
tel:+46764147049