Hi folks,
I am currently implementing DHIS2 in an environment where given users are able to READ data for a given program, but they cannot perform other changes (Edit profile, add events, etc).
Edit anything within the Profile Information and Events, seems to work OK (As long as the “Sharing Settings” are set properly), however, there is an action that is still possible → Transfer Ownership (from the enrollment section).
The following screenshot show how it looks from an Event/Profile persepective, versus, Enrollment.
Despite only being able to “see” events, he can still switch over the ownership of the enrollment →
Started at Peter Parker, Owned by OU1
Started at Peter Parker, Owned by OU2
Is this intended?