Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Transmit private data to logged-in admins? #85

Open
goldpbear opened this issue Aug 2, 2017 · 1 comment
Open

Transmit private data to logged-in admins? #85

goldpbear opened this issue Aug 2, 2017 · 1 comment
Labels

Comments

@goldpbear
Copy link
Contributor

Currently, when a form field is prefixed with private- (such as private-submitted_email), the data associated with the field won't be sent from the API to the client. This is useful for keeping sensitive user information safe.

But it also means that logged-in editors cannot edit private form fields in the application's editor. Do we want to give editors the ability to edit private data? If so, I think it will require changes on the API side.

@futuresoup -- do you think there's a strong use case for this?

@goldpbear
Copy link
Contributor Author

Hmm now that I think about this some more I realize we'd have to grant private data access to all admin groups, or we'd have to implement a new kind of private data access permission which we can selectively apply to datasets groups. That might be more trouble than it's worth.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant