Permission Configuration

In order to ensure site security we will leverage the fine grained access control provided by Drupal. In the following sections the permissions for each role are described. Note that by default administration permissions are restricted to administrators. To access this page please go to Administration > People and then click on the Permissions tab.

Administer User by Role

The following matrix shows the allowed permission for each role. Please see the Administer Users by Role Configuration page for more details.

Role	Project Manager	Doctor	Nurse	Coordinator	Patient
Project Manager	None	Create, View, Edit, Cancel	Create, View, Edit, Cancel	Create, View, Edit, Cancel	Create, View, Edit, Cancel
Doctor	None	None	None	None	Create, View, Edit, Cancel
Nurse	None	None	None	None	Create, View, Edit, Cancel
Coordinator	None	None	None	None	Create, View, Edit, Cancel
Patient	None	None	None	None	Create, View, Edit, Cancel

Comment

None of the roles can post or view comments. Given the nature of the site comments are not needed.

Contact

Only authenticated user can use the site wide contact form. This is done to prevent spam.

Content Translations

Doctors, Nurses, Coordinators and Project Managers can create and edit translations. However they cannot delete translations. This will provide administrative control over the translations presented on the site. Note that other users are not permitted to translate the content.

Drupal User

Doctors, Nurses, Coordinators and Project managers can provide translation services. Only administrators can administer translation tasks.

Entity Access by Role Field

This module has been enabled to allow us to ensure that we can give access to entities like content types created by the Webform Entity Handler to doctors, nurses, coordinators, project managers and administrators. This prevents other users and anonymous visitors from viewing these responses. Note that the Node View access permission noted below will otherwise grant permission to view all node content to users. See detailed configuration instructions here

Filter

This section allows setting up of permission to allow users to use various text formats. In this area, Anonymous users are allowed the restricted HTML format only. Rest can use the Basic HTML and Webform (default) text formats.

Media

Creating, editing and deleting media can be done by Project Managers. However they can only edit or delete their own media. View media permission is given to all users.

Node

View published content permission is provided to all users. However, further refinements to this permission is required as otherwise anyone will be able to see the content entities created by Webform Entity Handler.

Role delegation

Note that coordinator, doctor and nurse roles can be assigned by Project Managers whilst patient roles can be assigned by all of the above.

Search

Only authenticated users can use search functionality.

Translation Management Core

Coordinators, Doctors, Nurses and Project Manager roles can accept / reject translation jobs as well as submit them. Project managers can create translation jobs. Only administrators can administer translation management.

User

View user information permission is given to Project managers, coordinator and healthcare workers. They can also change username. Additionally they can view the users email address. Patients do not have this permission.

Webform

Project managers can access the webform overview and webform help pages. Project managers can also create webform and edit / delete their own webforms. Patients can view their own webform submission. Fine grain permissions on the viewing rights for the submissions will be granted separately at each webform configuration.