User Role Authorities - Lock Exceptions

Hi in Version 2.41.3.1 which authorities should one grant a role that will enable them to add lock exceptions without making them a superuser. The F_LOCKEXCEPTION_ADD does not show on the UI for this version.

1 Like

Hi @Nthatile

Welcome back to the DHIS2 Community of Practice! :clap:

Would you kindly check the name of the authority you are looking for “F_LOCKEXCEPTION_ADD” because I’m not able to find this authority anywhere.

In the latest versions, ‘legacy and nonstandard authorities’ do not appear in the UI and are listed in a separate section at the bottom of the User Role configuration page:

The section above is to help with deleting the “authorities” that are no longer effective.

Would you please share more about the use case and where you found this authority?

Thanks!

1 Like

Hi @Gassim , Thanks for your response. Here is a common use case in my country: When the set reporting period comes to an end all datasets are locked to prevent capture after the set date. Then if during supervisions or for whatever other reasons that data needs to be edited in the capture app, someone with the right authority will add a Lock exception for the particular dataste for a period that it needs to be edited for. I however cannot find the “F_LOCKEXCEPTION_ADD” in my current version in order to assign it to the role responsible for adding those lock exceptions. I mentione’d the “F_LOCKEXCEPTION_ADD” because thats the solution I found online while searcing, however I am looking for any standard solution that will work for my version. Below is the view I have:

1 Like

Hi again @Nthatile !

Thanks for the explanation. :slight_smile:

Could you check the solution suggested by @Saurabh to use the Data Administration app? Here: Unblock dataset for specific health centre - #2 by Saurabh

Please give the user who will configure the lock exception access to the Data Administration app.

I hope this helps, and I’m looking forward to knowing whether you’ll use it and if there are any challenges with taking this approach.

Thanks!

The user does have access to the Data Administration app, but when adding a lock exception the system returns this error: Error adding lock exception: Error: You don't have the proper permissions to update this object

I tried assigning all possible authorities to this role:

And its still returns the error above. However, when I grat the “All(Full Authority)” the user is able to add lock exceptions, this is challenging as the “All(Full Authority)” makes the user a superuser even when you restrict certain apps it gives them access to all apps.