Bug 20026 - Add new permission related to personal data
Summary: Add new permission related to personal data
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: System Administration (show other bugs)
Version: master
Hardware: All All
: P5 - low enhancement (vote)
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks: 18081
  Show dependency treegraph
 
Reported: 2018-01-18 10:03 UTC by Michal Denar
Modified: 2019-09-12 07:21 UTC (History)
9 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michal Denar 2018-01-18 10:03:00 UTC
Add new permission related to personal data. We should grant access to personal data at reports, plugins etc.
Comment 1 Magnus Enger 2019-09-12 06:41:28 UTC
It is probably too hard to detect reports or plugins that expose sensitive personal data. So a sysem for manually flagging reports and plugins that do, and then have special permissions for accessing them, sounds like a good idea. 

Reports flagged as containing sensitive data could perhaps also be blocked from being made public.
Comment 2 Michal Denar 2019-09-12 07:21:03 UTC
Hi Magnus,
I agree with your point of view. Only person who make report can make relevant decision. Semi automatic should come out from database items like: name, surname, date of birht, sex, adress, phone, email. We can say, thats personal data, be careful.