We need implement a records management system (the State is requiring us) and due to powers beyond my control, there WON'T be a single records managment controller, each department will handle their own records.
Hrmm, does Zoo Visitor hook into the Member Profile in the CP? I'm going to need some to train someone how to add new users and select their appropriate department.
I appreciate your help very much! I'm also at work, but since we're working on my problem I can get away with it :)
OK so with Zoo Visitor I can use any field type for member fields? That was my initial nightmare with the member fields, because each department is like "College of this and that" and the department ID's are lie "B103054", meaning the member field "select" was useless.
(because you can only give it a single value per row, not a label and a value)
sure, but a group of checkboxes will work wont it, checkbox value=B103054 label=College of this and that
then the moderators can tick the relivent ones
in short with channel fields / Zoo Visitors we can devise a way to set the access permission, so the bigger question is how to apply the permissions / map departments to channels
The Zoo Visitor checkbox thing sounds pretty functional for this too, because it means I can generate forms dynamically based on what departments a user has checked off in their profile. As for prevention of a user malforming their form to try and POST to a different department (i seriously doubt theirs a hacker amongst these academics), I think I'd have to do a simple on_submit extension that checked if the submitted records department is checked off in the submitting users profile.
nope! a single channel for every department. I know, it's an interesting problem. It's about record destruction... the State department of Compliance is directing us to create a system to be able to trigger when old documents need to be destroyed. They already have all the guidelines for that put togetehr.
Ahh,good old US law :) Fixed this before by building and hosting a US site in the UK, so UK laws apply lol but thats one hell of a legal workaround!! haha (We had someone from USA sue a client because their Irish website (with US sales portal) conflicted with the US Data Protection laws
Publish and Edit for channel entries is all front end. An Superadmin myself might dick around in the CP, but the only CP access that will be given out to non-developers will be for member managemnt.
while you were getting coffee I already told my vice-provost to get Zoo Visitor for this project, she'll buy it as soon as we're done here. But I'm pretty convinced.
There will probably be one person in records management who just handles personally creating accounts, but I assume with Zoo Visitor we could dump out a registration form with recaptcha somewhere, and shoot them into a pending member group
yeah, that makes sense. really the only thing that will change on the forms will be what departments show up in a select drop down, and preventing POSTS where the entry department ID isn't checked off for that user.
ROFL-copter "Fuck the users" = web developers quote of the day
its a safer bet, or get member managers to sign off on the "YOu can effect other departments, but we're asking you to sign off that you won;t"
would you have used categories on a single channel rather than 1 channel per dept if you had the choice though?? I find I avoid categories unless I can't
lol! yeaup. also, i wouldn't recommend building applications for PhD folks... it's like pulling teeth from an already buried horse. Dude, 300+ grad students, professors, and who knows (profs tend to dump this work on the lowliest person they can) else, this needs to locked down.
Yeah, the reason my boss (he started this app) is using a text channel field for record ownership is because he already a mysql table separate from EE with all of the departments and department ID's in it
lol yes! dude, all day, err day, i get asked things that people assume are simple ("can we create reports based on any field in this very complicated ERD?", "NOPE, I'm not building you a reporting engine")
Cool, well I think we got the most of it in! I really appreciate your consultation mang, Zoo Visitor is definitely the solution I'll go with. I think I get can it locked down.
I'm going to be implimenting an enterprise security policy for on and off boarding and management, but I'm leading so thats a good thing, I can be "This is how its done" instead of "how would you likee to handle this, [Incert directors name]
FYI, Are you going to answer your own question? I'll vote it up as its a good topic!
Don't worry, the internet is a-judging you. I gotta run off to campus (IT application dept is offsite), I'll be back in a few hours. I'll accept your answer when I see it.
Thanks again for helping out mang! Have a good day.