Fine Grained Access Control

• Priority: Low
• Knowledge required: Full-stack development/testing, Security Policy
• Status: Open

A prevailing security policy principle is the principle of least privilege. Course owners should be able to approach permissions assignment for their instructors following this principle. This includes but is not limited to hiding certain sensitive student details or allowing for the viewing of responses but not comments.

Points to consider:

• How features are currently utilised and accessed might require a rethinking of current permission sets
• Data migration might be required for changes that are incompatible with current data schema