Can I restrict write access to Dataset user group for with higher OU

I have a dataSet that I grant access to 2 groups.

Group one belongs to OrganisationUnit Level 5 at the facilities where data is captured. I gave the group “r-rw----” to write to the dataSet.

Group two belongs to OrganisationUnit Level 2 which means they can also submit data to OU level 5 as group 1. I want the group to be able to see the dataSet in data capture app but don’t have a write access to the dataSet. I gave the group 2 “r-rr----”.

I noticed that the group 2 cannot see the dataSet in data capture app unless I changed the access to “r-rw----”. But given this access means they can write to all the OUs under them. Is it possible to give them read access to the dataset in capture app that will allow them see the form but can’t submit data?

In the sharing settings of the Data Set from the Maintenance app, add group two and select ‘can view only’. See screenshot:

Thanks!

I did this and I was expecting that they will be able to see the form and the data submission will fail. But in the Data capture (Beta) app, the dataset was not showing to the user group. It was when I select ‘Can capture and view’ and login to the user account, the dataset appear in the app.

Yes, that is what’s supposed to happen. If not please share the steps to reproduce this issue in any of the play.dhis2.org instances. If you can’t reproduce it, please correct the sharing settings and check again in Guest mode to ensure it’s not a cache issue.

1 Like

I just reproduce this now in play.dhis2.org The dataset only appear in the app when I grant the user group the Can capture and view access.

And I check with guest mode the issue persist.