Resources and Attachments can now be securely shared with the correct users: Access to Resources and specially set up Event Form Attachments is now limited by Category
Access to Resources stored in the My Resources Module, and also attachments for Event Forms set up so that the attachments are resources, is now limited by Category access. User can now ONLY access documents from a category that they have been given access by their Administrator as part of their Roles.
Previously, there was no way to limit access to Medical Resources, S and C resources, Psychology Resources, or between Coach and Athlete Resources
The way many organisations limited access to Resources stored in the My Resources Module was to ONLY enable access to this Module for some users. Athletes were generally never given access because they could access any of the Resources stored here. Essentially, if you had access to the My Resources Module you could access ANY of the Resources that were uploaded here. This has now been upgraded, and only users with access to a specific category can access resources within that category. This means all users in an organisation can have access to the My Resource Module. However, they will only have access to the Resources in the Category that they are assigned.
Now when a Resource is uploaded, it has to be added into a category (folder); ONLY users with access to that category can access that Resource
The example here shows that this Resource is being added to the Category Admin. Only users with access to the "Admin" Category will be able to access this Resource.
Access is set by the system Administrator for this user via the Roles module. The image in the step below shows that each category has to be assigned to a user before they can access the documents in that category.
Access to each Category is set on the Administration Tool via the Roles Data Permissions
The example here shows all Categories in this demonstration site that can be assigned to a user. If a user has not been assigned access to a Category via their Role, they cannot access any Resources in that Category (even if they are Event Form Attachments-Resources; discussed in the subsequent section on Attachment-Resources).
The example here shows that an athlete has only been given access to the "Athlete" Category
To access the correct Resources, the Athlete will now need access to the Resources (in the Permissions) Module AND the correct Category via the Data Permissions
When the athlete logs in, the only Resources stored in the Athlete Category are available
N.B. In the New Resource Search Module the athlete has access to the same resources, but they appear in list format
The same Resources appear, but only after the Athlete clicks on "Search"