Role-based access and editing rights within a single form

  • Asked
  • Active
  • Viewed 42 times
0

Dear Open Foris Arena Team,

We would like to know whether Open Foris Arena allows different users or roles to have different access and editing rights within a single form.

Specifically, is it possible for each user to view or edit only the sections assigned to them, while another user or administrator retains full visibility of the entire form and can intervene when necessary?

We found the discussion "OFA: implementing 2 'disconnected' forms on the same entity - is it possible?", which mentions read-only and editable attributes. However, our question is specifically about role-based permissions and multi-user workflows within a single form.

Thank you in advance for your clarification.

Best regards,

ASSEDEV Team

0

Accepted answer

Dear ASSEDEV team,

Thank you for the follow-up question. Yes, Arena supports this kind of multi-user workflow within a single form. You can achieve it by combining:

  1. User extra properties, to assign parts of the form to each user;
  2. Conditional visibility and editability, to show or unlock each part only for the users assigned to it;
  3. User roles, to let several users work on the same records while an administrator keeps full control.

1. Assign parts of the form to users: User extra properties

User extra properties (User Manual §6.1.4) are custom properties that you define for your survey and set for each user.

  1. In Dashboard → Edit info → User extra properties, define a property, e.g. section.
  2. In Users, set its value for each user invited to the survey, e.g.:
    • vegetation for the users in charge of the vegetation part;
    • water for the users in charge of the water part;
    • all for coordinators and administrators who must see and edit everything.

2. Show or unlock each part: conditional visibility and editability

In the Form Designer, every entity (section/page) and attribute has two rules in its Advanced properties (§7.2.3 – Description of properties):

  • Visibility → "Visible if condition is met": the section is shown only to users for whom the condition is true and hidden for everyone else.
  • Editability → "Editable if condition is met": the section is visible to everyone but read-only for users for whom the condition is false.

In the condition, read the user's property with the userProp function (§7.3 – Expressions). For example, on the Vegetation section:

userProp('section') == 'vegetation' || userProp('section') == 'all'

and on the Water section:

userProp('section') == 'water' || userProp('section') == 'all'

The result is:

  • each user can edit only the sections assigned to them;
  • you choose, section by section, whether other users don't see it (Visibility) or see it read-only (Editability);
  • coordinators with section = all see and edit the whole form and can intervene at any time.

Some tips:

  • Set the rule on the entity (section) to apply it to all its attributes at once.
  • A user can be assigned to several sections if you define one property per section, e.g. can_edit_vegetation = true, and use userProp('can_edit_vegetation') == 'true'.
  • Other functions are available in the same expressions: userName(), userEmail(), userIsRecordOwner() (see §12 – Examples of expressions).

3. Who can work on the same records: user roles

When several users fill in different sections of the same record, their role must allow them to edit records created by others (§11.1 – User roles):

Role Records they can edit
Data Editor only the records they created
Data Cleanser all records of the survey
Survey Administrator all records of the survey, plus survey and user management

The users sharing records should therefore be Data Cleansers. The userProp rules then limit each of them to their own sections. The record workflow (Entry → Cleansing → Analysis) and the activity log help you organize the review and trace who changed what.

Note: visibility and editability rules control what users see and change in the data entry form. They do not restrict data export or the Data Explorer. If some data must stay confidential, choose the users' roles accordingly. If, in the future, different teams need to work on completely separate sets of records (e.g. by region), see §11.3 – User Grouping.

Documentation

Feel free to follow up if you need help setting this up for your specific case.

Best regards,
The Open Foris Arena team

0

Accepted answer

Dear Stefano and the Open Foris Arena Team,

Thank you very much for your detailed and helpful response regarding user access and editing permissions within a single Arena form.

Your explanations provide valuable guidance for our ASSEDEV Alerte Environnement project and will help us refine our technical approach.

Before proceeding further, we would appreciate your clarification on one additional technical question:

Can Open Foris Arena automatically verify whether the GPS coordinates of a report fall within a predefined geographic boundary (polygon), and flag or prevent the validation of reports submitted outside this area?

We would particularly appreciate knowing whether this can be configured directly within Arena, including when collecting data through Arena Mobile.

Thank you again for your continued support and valuable assistance.

Best regards,

ASSEDEV Team Association pour l’Assainissement, la Sauvegarde de l’Environnement et le Développement https://assedev.fr

0

Accepted answer

Dear Stefano and the Open Foris Arena Team,

Thank you very much for your detailed and helpful response regarding user access and editing permissions within a single Arena form.

Your explanations provide valuable guidance for our ASSEDEV Alerte Environnement project and will help us refine our technical approach.

Before proceeding further, we would appreciate your clarification on one additional technical question:

Can Open Foris Arena automatically verify whether the GPS coordinates of a report fall within a predefined geographic boundary (polygon), and flag or prevent the validation of reports submitted outside this area?

We would particularly appreciate knowing whether this can be configured directly within Arena, including when collecting data through Arena Mobile.

Thank you again for your continued support and valuable assistance.

Best regards,

ASSEDEV Team https://assedev.fr

Your answer

Markdown text. Shortcuts: Ctrl+B bold, Ctrl+I italic, Ctrl+K link, Ctrl+E code, Ctrl+Shift+V paste as plain text. Tab indents list items and code; press Escape, then Tab, to leave the text box.

Insert an image

Say what the image shows, for people who can't see it.

Keyboard shortcuts

Anywhere

?
Show this list
/
Search
g h
Go to the home page
g q
Go to the questions
g t
Go to the tags
g u
Go to the users
a
Ask a question

Lists of questions

j k
Next or previous question
Enter
Open the question

Question pages

j k
Next or previous post

Shortcuts never apply while you type in a text field. Members can turn them off in their preferences.