Capture app – Profile widget displays TEA values despite Sharing permissions and Program Rules

Support - Assistance technique
1

Hello DHIS2 Community,

We are testing DHIS2 2.41.6 and would like to clarify the expected behaviour of the Profile widget in the Capture app.

We have a national HIV Tracker program where some Tracked Entity Attributes (First Name, Last Name, National ID, Phone, etc.) are considered highly sensitive.

We performed the following tests:

  1. Sharing permissions

    • We removed access to the “First Name” and “Last Name” attributes for a specific user group.

    • Result:

      • The Capture TEI list correctly hides these attributes.

      • They are also unavailable in the column selector.

      • However, the Profile widget (right panel) still displays the values.

  2. Program Rules

    • We created a Program Rule using:
    d2:hasUserRole('USER_ROLE_UID')

    • Actions:

      • Hide First Name

      • Hide Last Name

      • Hide National ID

      • Hide Phone

    • Result:

      • The fields are correctly hidden in the edit form.

      • However, the Profile widget still displays the values.

Therefore, it appears that the Profile widget does not follow either:

  • TEA Sharing permissions, or

  • Program Rule “Hide Field” actions.

Questions

  1. Is this the expected behaviour of the Capture Profile widget?

  2. Is there any supported way to hide specific TEA values from the Profile widget for certain users?

  3. If not, would this be considered a bug or a feature request?

Our goal is to protect personally identifiable information in a national HIV implementation while allowing users to continue using the Capture application.

Thank you very much for your guidance.