Skip to content

Commit

Permalink
Merge pull request #366 from kobotoolbox/update-managing-permissions
Browse files Browse the repository at this point in the history
Update managing_permissions.md
  • Loading branch information
maedelange authored Apr 5, 2024
2 parents a97eb72 + 7517a68 commit 119de47
Show file tree
Hide file tree
Showing 2 changed files with 55 additions and 45 deletions.
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
100 changes: 55 additions & 45 deletions source/managing_permissions.md
Original file line number Diff line number Diff line change
Expand Up @@ -2,43 +2,42 @@
**Last updated:** <a href="https://github.com/kobotoolbox/docs/blob/db6ad5917874a7ca1122c24f674a02d1cbaafa87/source/managing_permissions.md" class="reference">25 Mar 2024</a>

KoboToolbox allows you to give different levels of access to different users by
setting flexible permission levels within each project. While most users may
only need to manage a single account to access, enter and review data for a
given project, sometimes more complex scenarios require multiple users with
different levels of access.
setting flexible permissions for each project. While most users may
only need to access and enter or review data for a
given project, sometimes more complex scenarios require multiple users to have different levels of project access.

For example, you can share a project with some users and only allow them to
submit data to the project through their account, and adjust the settings such
that others can only view or edit the submitted data.
submit data to the project through their account. You can also adjust the settings so
that other users can only view or edit the submitted data.

This article describes how you can grant permissions for other KoboToolbox users
This article explains how you can grant permissions for other KoboToolbox users
to collaborate on your projects.

## Requiring passwords for accessing Enketo web forms

By default, KoboToolbox requires a username and password for accessing data,
managing your projects, and submitting data. When a new project has been deployed, the Enketo web
By default, KoboToolbox requires a username and password to access data,
manage projects, and submit data. When a new project has been deployed, the Enketo web
form will require authentication for an individual to be able to access the form and send submissions to the project.

In some cases, you may wish to enable data entry from anyone who knows the Enketo web form URL. In this case, any individual with access to the form URL can send submissions to the project, without them being required to be
logged into their KoboToolbox user accounts.
In some cases, you may wish to enable data entry for anyone with access to the Enketo web form URL. In this case, any individual with access to the form URL can send submissions to the project without being required to sign in to their KoboToolbox account.

To allow data entry for anyone with access to the form URL:
- Open the project in KoboToolbox, and go to the **FORM** section
- Below the Collect Data section, use the toggle button to enable "Allow submissions to this form without a username and password"

![Requiring passwords](images/managing_permissions/allow_submissions.gif)

You can also make changes to this privacy feature by going to the **Sharing** tab in the **SETTINGS** page in your data collection project and toggling the default setting to enable “Allow submissions to this form without a username and password”, or when accessing your **Sharing Permissions**.
You can also change this permission setting directly in your **Sharing Permissions** or by going to the **Sharing** tab in the **SETTINGS** page in your project and toggling the default setting to enable “Allow submissions to this form without a username and password”.

![Requiring passwords](images/managing_permissions/allow_submissions_settings.gif)

<p class="note">
Setting forms to require authentication is now available as a per-project setting. This privacy feature replaces the old account setting “Require authentication to see forms and submit data”. With this new update, new projects require authentication by default. Existing projects inherit your old account-level settings as they are at the time of this update.
Setting forms to require authentication is now available as a per-project setting. This privacy feature replaces the previous account setting “Require authentication to see forms and submit data”. With this update, new projects require authentication by default. Existing projects inherit your previous account-level settings as they were at the time of this update.
</p>

## Sharing a project with other users and setting their permissions

The following steps show how you can share a project with other KoboToolbox
The following steps explain how to share a project with other KoboToolbox
users and control which users can view, share, or edit your form or submissions.

- Go to the **Sharing** tab in the **SETTINGS** page in your data collection
Expand All @@ -60,23 +59,23 @@ users and control which users can view, share, or edit your form or submissions.
- Delete submissions
- Manage project

Some permissions automatically grant other permissions. For example, if a user
is granted "Add submissions" they will also be granted "View form."
<p class="note">
When certain permissions are granted, other permissions are also automatically granted. For example, if a user is granted "Add submissions" permission, they will also be granted "View form" permission.
</p>

## Assigning "Add submissions" rights for specific users
## Assigning "Add submissions" permission for specific users

If you have enumerators in the field collecting data, you might want to ensure
they are not able to see any of the data that has been submitted.
In some scenarios, you may want to restrict enumerators who are collecting data in the field from being able to view the submitted data.

In this case, instead of configuring KoboCollect with a single account's
username and password, you can create separate accounts for each enumerator, and
share the form with limited permissions.

In KoboToolbox:

- Create an all enumerator accounts on the same server
- Create all enumerator accounts on the same server
- Share the project with each enumerator account using the steps described
above, only giving them limited permissions (such as "Add Submissions").
above, and only assign them the desired permissions, for example "Add Submissions".

In KoboCollect:

Expand All @@ -86,15 +85,15 @@ In KoboCollect:

## Row-level permissions for users

You can also set [row-level permissions](row_level_permissions.md) for users
which can be helpful in several scenarios:
You can also set [row-level permissions](row_level_permissions.md) for users.
This can be helpful in several scenarios, for example:

- An organization implementing a project in collaboration with several partner
organizations may want to give the partners access to only the data collected
by them.
- A researcher may want to allow each enumerator access to the data _only_ they
collected and be able to make edits.
- In an organization, there may be clear roles of data collectors who may only
- A researcher may want to allow each enumerator to access and edit *only* the data they
collected.
- In an organization, there may be different roles for data collectors who may only
be allowed to submit data, data quality officers who may only be allowed to
view and validate submissions, and users who may be allowed to view reports
and download the data.
Expand All @@ -108,56 +107,67 @@ Setting row-level permissions:
- Add a comma-separated list of usernames with whom you want to share the
project

Learn more about [row-level permissions](row_level_permissions.md).

## Copy permissions from another project

To copy team permissions from a another project, click on "Copy team from
another project" located at the bottom of the page and select the project to
copy from.
To copy team permissions from a another project, open the **Sharing** tab in the **SETTINGS** page of your project. Click on "Copy team from another project", and then select the project that you with to copy permissions from.

<p class="note">
This will overwrite any existing sharing settings already defined on the
current project.
This will overwrite any existing sharing settings on the project you are adding the permissions to.
</p>

## Removing shared projects from your account

To remove projects that were shared with your account by others:
If you wish to remove a project that anohter user shared with you, follow these steps:

- On the project list, point your mouse on the project name and click the
<i class="k-icon k-icon-more"></i> **More action** button
- Click **Remove shared form**
- On the project list, select the project you wish to remove
- Click on the **Sharing** button in the **Team members** section
- Click the trashcan button to delete your permissions for this project
- Click **REMOVE**

When you navigate back to the project list, the project will no longer be listed.

You can also remove a project through the **Form** tab:

- Open the project
- Click on the **Form** tab
- Click on the <i class="k-icon k-icon-more"></i> **More actions** button
- Click **Remove shared project**
- Click **REMOVE**

![Remove Sharing](images/managing_permissions/remove_permissions.gif)

## Making your project and data public

In addition to sharing your project with specific users, you can also make your
form and submissions public:
In addition to sharing your project with specific KoboToolbox users, you can also make your
form and/or submissions public:

- Go to the **Sharing** tab in the **SETTINGS** page in your data collection
project.
project
- Select the options **Anyone can view this form** or **Anyone can view
submissions made to this form**.
submissions made to this form**

![Making data public](images/managing_permissions/make_data_public.png)

A URL will be displayed, which you can share with anyone to provide access to
the form and/or the submission data without logging in. If the form is made
public, anyone with the link may be able to:
A URL will be displayed that you can share with anyone to provide access to
the form and/or the submission data without requiring them to sign in to a KoboToolbox account. If the form is made public, anyone with the link will be able to:

- Preview the form
- Download the form as XLS or XML

In addition, if the data is also public:
If the data is also made public, anyone with the link will be able to:

- View the data in the **Table** view
- View and print **Reports**
- View the **Gallery**
- **Download** the data
- View the data in the **Map** view

Here we can see what parts of the project the public will have access to when
they open the URL.
<p class="note">
When the form and the data are made public, anyone with the URL will be able to access the project as shown in the video below.
</p>

![Public project](images/managing_permissions/public_project.gif)

## Transferring ownership of a project

0 comments on commit 119de47

Please sign in to comment.