<!-- 
RSS generated by JIRA (1001.0.0-SNAPSHOT#100246-sha1:7a5c50119eb0633d306e14180817ddef5e80c75d) at Fri Feb 09 00:06:33 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary add field=key&field=summary to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>FOLIO Jira</title>
    <link>https://folio-org.atlassian.net</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>1001.0.0-SNAPSHOT</version>
        <build-number>100246</build-number>
        <build-date>07-02-2024</build-date>
    </build-info>

<item>
            <title>[UXPROD-206] Field Restrictions in User Management</title>
                <link>https://folio-org.atlassian.net/browse/UXPROD-206</link>
                <project id="10000" key="UXPROD">UX Product</project>
                    <description>&lt;p&gt;Background:&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;Requirement is to enable permission control over specific fields on the user record (and other record types that need it).&lt;/li&gt;
	&lt;li&gt;Original plan was to have two levels of fields: basic and restricted.  We would then offer a &quot;basic&quot; and &quot;all&quot; version of each user permission. For example: &quot;Users: Can view user profile (basic fields)&quot;, &quot;Users: Can view user profile (all fields)&quot;, &quot;Users: Can edit user profile (basic fields), Users: Can edit user profile (all fields)&quot; etc.&lt;/li&gt;
	&lt;li&gt;For the initial version, we might set which field were basic vs restricted on a system level.  Future iterations might include tenant-level configuration.&lt;/li&gt;
	&lt;li&gt;So far, the only &lt;em&gt;user&lt;/em&gt; field that SMEs have identified as needing to be permission-controlled is Address (for privacy reasons).  And, actually, we need to be able to make just certain types of addresses restricted (addresses have a &quot;type&quot; which are defined by the library in Settings).  Given we only had one use case, we had held off on implementing this feature.&lt;/li&gt;
	&lt;li&gt;We need to determine whether we should continue with the originally planned approach or if there is a simpler way to handle control of just the Address field (maybe when you are CRUDing address types, you can flag them as sensitive?)&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;There was a user story drafted for the original approach and it waits in the backlog on hold and in draft state: 
    &lt;span class=&quot;jira-issue-macro&quot; data-jira-key=&quot;UIU-10&quot; &gt;
                &lt;a href=&quot;https://folio-org.atlassian.net/browse/UIU-10&quot; class=&quot;jira-issue-macro-key issue-link&quot;  title=&quot;HOLD: Permissions: Can View User Profile: All Fields&quot; &gt;
            &lt;img class=&quot;icon&quot; src=&quot;https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10309?size=medium&quot; /&gt;
            UIU-10
        &lt;/a&gt;
                                                    &lt;span class=&quot;aui-lozenge aui-lozenge-subtle aui-lozenge-complete jira-macro-single-issue-export-pdf&quot;&gt;Draft&lt;/span&gt;
            &lt;/span&gt;
&lt;/p&gt;</description>
                <environment></environment>
        <key id="10287">UXPROD-206</key>
            <summary>Field Restrictions in User Management</summary>
                <type id="10002" iconUrl="https://folio-org.atlassian.net/rest/api/2/universal_avatar/view/type/issuetype/avatar/10322?size=medium">New Feature</type>
                            <parent id="13651">UXPROD-784</parent>
                                    <priority id="10002" iconUrl="https://dev.folio.org/assets/jira-priority/jira-p3.svg">P3</priority>
                        <status id="6" iconUrl="https://folio-org.atlassian.net/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="green"/>
                                    <resolution id="10000">Won&apos;t Do</resolution>
                                                        <assignee accountid="5f5241b9fcaf93003b5bee25">patty.wanninger</assignee>
                                                                <reporter accountid="5af5ed55244bc90a106063c7">Cate Boerema</reporter>
                                    <labels>
                            <label>usermanagement</label>
                    </labels>
                <created>Fri, 16 Feb 2018 13:53:32 +0000</created>
                <updated>Thu, 5 Mar 2020 17:27:29 +0000</updated>
                            <resolved>Wed, 30 May 2018 15:06:51 +0000</resolved>
                                                                        <due></due>
                            <votes>0</votes>
                                    <watches>4</watches>
                                                                <comments>
                                                            <comment id="11680" author="62a96ae7192edb006f9f1bf9" created="Wed, 30 May 2018 15:06:51 +0000"  >&lt;p&gt;5/30/2018: Per UM SIG - stick with current approach - leverage permissions.  Ensure dev can support flexibility in case we need it in the future.&lt;/p&gt;</comment>
                                                            <comment id="11685" author="5af5ed55244bc90a106063c7" created="Thu, 5 Mar 2020 16:17:25 +0000"  >&lt;p&gt;Hi &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5f5241b9fcaf93003b5bee25&quot; class=&quot;user-hover&quot; rel=&quot;5f5241b9fcaf93003b5bee25&quot; data-account-id=&quot;5f5241b9fcaf93003b5bee25&quot; accountid=&quot;5f5241b9fcaf93003b5bee25&quot; rel=&quot;noreferrer&quot;&gt;patty.wanninger&lt;/a&gt; and &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=62a96ae7192edb006f9f1bf9&quot; class=&quot;user-hover&quot; rel=&quot;62a96ae7192edb006f9f1bf9&quot; data-account-id=&quot;62a96ae7192edb006f9f1bf9&quot; accountid=&quot;62a96ae7192edb006f9f1bf9&quot; rel=&quot;noreferrer&quot;&gt;Khalilah Gambrell&lt;/a&gt;.  In the RA SIG meeting, it sounded like folks wanted to resurrect this issue.  Any objections?&lt;/p&gt;

&lt;p&gt;+ &lt;a href=&quot;https://folio-org.atlassian.net/secure/ViewProfile.jspa?accountId=5c7405f424a84d1307801d06&quot; class=&quot;user-hover&quot; rel=&quot;5c7405f424a84d1307801d06&quot; data-account-id=&quot;5c7405f424a84d1307801d06&quot; accountid=&quot;5c7405f424a84d1307801d06&quot; rel=&quot;noreferrer&quot;&gt;Andrea Loigman&lt;/a&gt;&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10003">
                    <name>Relates</name>
                                                                <inwardlinks description="relates to">
                                        <issuelink>
            <issuekey id="42284">UIU-10</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                <customfield id="customfield_10049" key="com.atlassian.jira.plugin.system.customfieldtypes:userpicker">
                        <customfieldname>Analysis Estimator</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>62a96ae7192edb006f9f1bf9</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                            <customfield id="customfield_10053" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Back End Estimate</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10122"><![CDATA[Large < 10 days]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10054" key="com.atlassian.jira.plugin.system.customfieldtypes:userpicker">
                        <customfieldname>Back End Estimator</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_10000" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummarycf">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10014" key="com.pyxis.greenhopper.jira:gh-epic-link">
                        <customfieldname>Epic Link</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue key="$xmlutils.escape($text)">Users App</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10056" key="com.atlassian.jira.plugin.system.customfieldtypes:textarea">
                        <customfieldname>Estimation Notes and Assumptions</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>An easier solution would be to just flag a certain address type as restricted and not display in the UI but it would still be available by back end, so it&amp;#39;s not secure, but easier&lt;br/&gt;
&lt;br/&gt;
Otherwise we need restrictred vs basic as original proposal&lt;br/&gt;
&lt;br/&gt;
But address is actually a separate endpoint which makes it easy to add a permission.  This would make it medium on back end.</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10050" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Front End Estimate</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10096"><![CDATA[Small < 3 days]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10051" key="com.atlassian.jira.plugin.system.customfieldtypes:userpicker">
                        <customfieldname>Front End Estimator</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>557058:b8e64633-1f7c-402d-9caf-9959a5ba5d0d</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            <customfield id="customfield_10019" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>0|hzy6sf:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10020" key="com.pyxis.greenhopper.jira:gh-sprint">
                        <customfieldname>Sprint</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10024" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>[CHART] Date of First Response</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Wed, 30 May 2018 15:06:51 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10025" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>[CHART] Time in Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>