Dashboard sharing access rights

yes, we have the same problem.

···

2017-04-06 13:43 GMT+02:00 TIMIMI, Hazim Bakir <timimih@who.int>:

Dear DHIS2 friends,

I wonder if anyone else has come across the following problem and, if so,
how you solved it: All dashboards on our instance have their public access
(with login) sharing setting as 'Can View'. However users are able to
remove or resize objects in the dashboard which affects everybody else!

I have tried restricting public access to 'None' and only granting 'Can
View' to a specific user group, and 'Can Edit and View' to a very small
number, but I still find users in the group with 'Can View' permission are
able to remove objects from the dashboards.

We are using v 2.25, but I can reproduce the problem in v2.26 on
https://play.dhis2.org/demo/.

This bug was logged in Jira a while ago (https://jira.dhis2.org/
projects/DHIS2/issues/DHIS2-500) and I also logged another request for a
warning dialog to appear when users click on the 'Remove' link (
https://jira.dhis2.org/browse/DHIS2-1383).

Any help or pointers would be much appreciated!

Thanks,

Hazim
…..
Hazim Timimi
Data Manager, Tuberculosis Monitoring and Evaluation, World Health
Organization, Geneva, Switzerland
Tel : +41 22 791 3468

_______________________________________________
Mailing list: https://launchpad.net/~dhis2-users
Post to : dhis2-users@lists.launchpad.net
Unsubscribe : https://launchpad.net/~dhis2-users
More help : https://help.launchpad.net/ListHelp

This is a known bug. If you want to follow the development and get notified when there is a fix you can register and watch the bug issue here: https://jira.dhis2.org/browse/DHIS2-500

Best,

Trøyel

···

yes, we have the same problem.

2017-04-06 13:43 GMT+02:00 TIMIMI, Hazim Bakir timimih@who.int:

Dear DHIS2 friends,

I wonder if anyone else has come across the following problem and, if so, how you solved it: All dashboards on our instance have their public access (with login) sharing setting as ‘Can View’. However users are able to remove or resize objects in the dashboard which affects everybody else!

I have tried restricting public access to ‘None’ and only granting ‘Can View’ to a specific user group, and ‘Can Edit and View’ to a very small number, but I still find users in the group with ‘Can View’ permission are able to remove objects from the dashboards.

We are using v 2.25, but I can reproduce the problem in v2.26 on
https://play.dhis2.org/demo/
.

This bug was logged in Jira a while ago (https://jira.dhis2.org/projects/DHIS2/issues/DHIS2-500 ) and I also logged another request for a warning dialog to appear when users click on the ‘Remove’ link (https://jira.dhis2.org/browse/DHIS2-1383).

Any help or pointers would be much appreciated!

Thanks,

Hazim

……

Hazim Timimi

Data Manager, Tuberculosis Monitoring and Evaluation, World Health Organization, Geneva, Switzerland

Tel : +41 22 791 3468


Mailing list: https://launchpad.net/~dhis2-users

Post to : dhis2-users@lists.launchpad.net

Unsubscribe : https://launchpad.net/~dhis2-users

More help : https://help.launchpad.net/ListHelp

Oh, apologies. I didn’t read the complete email and see you are already aware of the issue J

/T

···

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Trøyel Nerbø

Sent: torsdag 6. april 2017 14.21

To: Antonia - Pro antonia@informa.pro; dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int

Subject: Re: [Dhis2-users] Dashboard sharing access rights

This is a known bug. If you want to follow the development and get notified when there is a fix you can register and watch the bug issue here: https://jira.dhis2.org/browse/DHIS2-500

Best,

Trøyel

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Antonia - Pro

Sent: torsdag 6. april 2017 14.06

To: dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int

Subject: Re: [Dhis2-users] Dashboard sharing access rights

yes, we have the same problem.

2017-04-06 13:43 GMT+02:00 TIMIMI, Hazim Bakir timimih@who.int:

Dear DHIS2 friends,

I wonder if anyone else has come across the following problem and, if so, how you solved it: All dashboards on our instance have their public access (with login) sharing setting as ‘Can View’. However users are able to remove or resize objects in the dashboard which affects everybody else!

I have tried restricting public access to ‘None’ and only granting ‘Can View’ to a specific user group, and ‘Can Edit and View’ to a very small number, but I still find users in the group with ‘Can View’ permission are able to remove objects from the dashboards.

We are using v 2.25, but I can reproduce the problem in v2.26 on
https://play.dhis2.org/demo/
.

This bug was logged in Jira a while ago (https://jira.dhis2.org/projects/DHIS2/issues/DHIS2-500 ) and I also logged another request for a warning dialog to appear when users click on the ‘Remove’ link (https://jira.dhis2.org/browse/DHIS2-1383).

Any help or pointers would be much appreciated!

Thanks,

Hazim

……

Hazim Timimi

Data Manager, Tuberculosis Monitoring and Evaluation, World Health Organization, Geneva, Switzerland

Tel : +41 22 791 3468


Mailing list: https://launchpad.net/~dhis2-users

Post to : dhis2-users@lists.launchpad.net

Unsubscribe : https://launchpad.net/~dhis2-users

More help : https://help.launchpad.net/ListHelp

No worries Trøyel! Olav Poppe reporting it on JIRA on my behalf a while back – I was just trying to find out if anybody has a workaround or solution until the bug is fixed J

Cheers,

Hazim

···

From: Trøyel Nerbø [mailto:troyel.nerbo@nrc.no]
Sent: 06 April 2017 14:24
To: Trøyel Nerbø; Antonia - Pro; dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir
Subject: RE: [Dhis2-users] Dashboard sharing access rights

Oh, apologies. I didn’t read the complete email and see you are already aware of the issue J

/T

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Trøyel Nerbø
Sent: torsdag 6. april 2017 14.21
To: Antonia - Pro antonia@informa.pro; dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int
Subject: Re: [Dhis2-users] Dashboard sharing access rights

This is a known bug. If you want to follow the development and get notified when there is a fix you can register and watch the bug issue here: https://jira.dhis2.org/browse/DHIS2-500

Best,

Trøyel

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Antonia - Pro
Sent: torsdag 6. april 2017 14.06
To: dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int
Subject: Re: [Dhis2-users] Dashboard sharing access rights

yes, we have the same problem.

2017-04-06 13:43 GMT+02:00 TIMIMI, Hazim Bakir timimih@who.int:

Dear DHIS2 friends,

I wonder if anyone else has come across the following problem and, if so, how you solved it: All dashboards on our instance have their public access (with login) sharing setting as ‘Can View’. However users are able to remove or resize objects in the dashboard which affects everybody else!

I have tried restricting public access to ‘None’ and only granting ‘Can View’ to a specific user group, and ‘Can Edit and View’ to a very small number, but I still find users in the group with ‘Can View’ permission are able to remove objects from the dashboards.

We are using v 2.25, but I can reproduce the problem in v2.26 on https://play.dhis2.org/demo/.

This bug was logged in Jira a while ago (https://jira.dhis2.org/projects/DHIS2/issues/DHIS2-500) and I also logged another request for a warning dialog to appear when users click on the ‘Remove’ link (https://jira.dhis2.org/browse/DHIS2-1383).

Any help or pointers would be much appreciated!

Thanks,

Hazim
……
Hazim Timimi
Data Manager, Tuberculosis Monitoring and Evaluation, World Health Organization, Geneva, Switzerland
Tel : +41 22 791 3468


Mailing list: https://launchpad.net/~dhis2-users
Post to : dhis2-users@lists.launchpad.net
Unsubscribe : https://launchpad.net/~dhis2-users
More help : https://help.launchpad.net/ListHelp

I haven’t tested this yet, but a potential work around would be to monitor/schedule a reset of the dashboard items by updating the /api/dashboards/uid.json with the dashboard items it is supposed to contain. Not sure how this would work with resizing and ordering, though.

Altneratively, a perhaps better solution. What about adding all users to a user group with the purpose of sharing it as non-public but with the “all users” group? I haven’t tested if the bug is with all “view only” or just the public setting.

Trøyel

···

From: TIMIMI, Hazim Bakir [mailto:timimih@who.int]

Sent: torsdag 6. april 2017 16.05

To: Trøyel Nerbø troyel.nerbo@nrc.no; Antonia - Pro antonia@informa.pro; dhis2-users@lists.launchpad.net

Subject: RE: [Dhis2-users] Dashboard sharing access rights

No worries Trøyel! Olav Poppe reporting it on JIRA on my behalf a while back – I was just trying to find out if anybody has a workaround or solution until the bug is fixed J

Cheers,

Hazim

From: Trøyel Nerbø [mailto:troyel.nerbo@nrc.no]

Sent: 06 April 2017 14:24

To: Trøyel Nerbø; Antonia - Pro;
dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir

Subject: RE: [Dhis2-users] Dashboard sharing access rights

Oh, apologies. I didn’t read the complete email and see you are already aware of the issue J

/T

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Trøyel Nerbø

Sent: torsdag 6. april 2017 14.21

To: Antonia - Pro antonia@informa.pro; dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int

Subject: Re: [Dhis2-users] Dashboard sharing access rights

This is a known bug. If you want to follow the development and get notified when there is a fix you can register and watch the bug issue here: https://jira.dhis2.org/browse/DHIS2-500

Best,

Trøyel

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Antonia - Pro

Sent: torsdag 6. april 2017 14.06

To: dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int

Subject: Re: [Dhis2-users] Dashboard sharing access rights

yes, we have the same problem.

2017-04-06 13:43 GMT+02:00 TIMIMI, Hazim Bakir timimih@who.int:

Dear DHIS2 friends,

I wonder if anyone else has come across the following problem and, if so, how you solved it: All dashboards on our instance have their public access (with login) sharing setting as ‘Can View’. However users are able to remove or resize objects in the dashboard which affects everybody else!

I have tried restricting public access to ‘None’ and only granting ‘Can View’ to a specific user group, and ‘Can Edit and View’ to a very small number, but I still find users in the group with ‘Can View’ permission are able to remove objects from the dashboards.

We are using v 2.25, but I can reproduce the problem in v2.26 on
https://play.dhis2.org/demo/
.

This bug was logged in Jira a while ago (https://jira.dhis2.org/projects/DHIS2/issues/DHIS2-500 ) and I also logged another request for a warning dialog to appear when users click on the ‘Remove’ link (https://jira.dhis2.org/browse/DHIS2-1383).

Any help or pointers would be much appreciated!

Thanks,

Hazim

……

Hazim Timimi

Data Manager, Tuberculosis Monitoring and Evaluation, World Health Organization, Geneva, Switzerland

Tel : +41 22 791 3468


Mailing list: https://launchpad.net/~dhis2-users

Post to : dhis2-users@lists.launchpad.net

Unsubscribe : https://launchpad.net/~dhis2-users

More help : https://help.launchpad.net/ListHelp

Hi Trøyel,

As I said, I have also tried restricting public access to ‘None’ and only granting ‘Can View’ to a specific user group, and ‘Can Edit and View’ to a very small number, but I still find users in the group with ‘Can View’ permission are able to remove objects from the dashboards. I’m not sure how that differs from what you suggest.

Sorry, I didn’t quite understand your first paragraph. Just to note we don’t have access to the server itself, just the web interface.

Hazim

···

From: Trøyel Nerbø [mailto:troyel.nerbo@nrc.no]
Sent: 06 April 2017 16:44
To: TIMIMI, Hazim Bakir; Antonia - Pro; dhis2-users@lists.launchpad.net
Subject: RE: [Dhis2-users] Dashboard sharing access rights

I haven’t tested this yet, but a potential work around would be to monitor/schedule a reset of the dashboard items by updating the /api/dashboards/uid.json with the dashboard items it is supposed to contain. Not sure how this would work with resizing and ordering, though.

Altneratively, a perhaps better solution. What about adding all users to a user group with the purpose of sharing it as non-public but with the “all users” group? I haven’t tested if the bug is with all “view only” or just the public setting.

Trøyel

From: TIMIMI, Hazim Bakir [mailto:timimih@who.int]
Sent: torsdag 6. april 2017 16.05
To: Trøyel Nerbø troyel.nerbo@nrc.no; Antonia - Pro antonia@informa.pro; dhis2-users@lists.launchpad.net
Subject: RE: [Dhis2-users] Dashboard sharing access rights

No worries Trøyel! Olav Poppe reporting it on JIRA on my behalf a while back – I was just trying to find out if anybody has a workaround or solution until the bug is fixed J

Cheers,

Hazim

From: Trøyel Nerbø [mailto:troyel.nerbo@nrc.no]
Sent: 06 April 2017 14:24
To: Trøyel Nerbø; Antonia - Pro; dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir
Subject: RE: [Dhis2-users] Dashboard sharing access rights

Oh, apologies. I didn’t read the complete email and see you are already aware of the issue J

/T

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Trøyel Nerbø
Sent: torsdag 6. april 2017 14.21
To: Antonia - Pro antonia@informa.pro; dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int
Subject: Re: [Dhis2-users] Dashboard sharing access rights

This is a known bug. If you want to follow the development and get notified when there is a fix you can register and watch the bug issue here: https://jira.dhis2.org/browse/DHIS2-500

Best,

Trøyel

From: Dhis2-users [mailto:dhis2-users-bounces+troyel.nerbo=nrc.no@lists.launchpad.net] On Behalf Of Antonia - Pro
Sent: torsdag 6. april 2017 14.06
To: dhis2-users@lists.launchpad.net; TIMIMI, Hazim Bakir timimih@who.int
Subject: Re: [Dhis2-users] Dashboard sharing access rights

yes, we have the same problem.

2017-04-06 13:43 GMT+02:00 TIMIMI, Hazim Bakir timimih@who.int:

Dear DHIS2 friends,

I wonder if anyone else has come across the following problem and, if so, how you solved it: All dashboards on our instance have their public access (with login) sharing setting as ‘Can View’. However users are able to remove or resize objects in the dashboard which affects everybody else!

I have tried restricting public access to ‘None’ and only granting ‘Can View’ to a specific user group, and ‘Can Edit and View’ to a very small number, but I still find users in the group with ‘Can View’ permission are able to remove objects from the dashboards.

We are using v 2.25, but I can reproduce the problem in v2.26 on https://play.dhis2.org/demo/.

This bug was logged in Jira a while ago (https://jira.dhis2.org/projects/DHIS2/issues/DHIS2-500) and I also logged another request for a warning dialog to appear when users click on the ‘Remove’ link (https://jira.dhis2.org/browse/DHIS2-1383).

Any help or pointers would be much appreciated!

Thanks,

Hazim
……
Hazim Timimi
Data Manager, Tuberculosis Monitoring and Evaluation, World Health Organization, Geneva, Switzerland
Tel : +41 22 791 3468


Mailing list: https://launchpad.net/~dhis2-users
Post to : dhis2-users@lists.launchpad.net
Unsubscribe : https://launchpad.net/~dhis2-users
More help : https://help.launchpad.net/ListHelp