Dynamic Survey Access Control via Role-Based Data Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing survey management systems require manual data export and are not dynamic or scalable in granting access rights, as access rights are specific to individual users and responses, making them inefficient for managing participant and viewer authentication and authorization.
Innovation Solution
A computing system that generates a survey data object specifying participants and delegates, defines data access rules, and filters survey response data based on these rules to dynamically restrict access, allowing partial access to survey responses based on relationships between users.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If manual data export and individual access rights are used, then access control can be implemented, but the process is not dynamic or scalable
Solution Approach 1:
The system automatically manages access rights by leveraging existing organizational data and relationships. The computational system queries organizational data to identify delegates and their constituents, then automatically grants or restricts survey response access without requiring manual data export or individual access right configuration for each user.
Solution Approach 2:
The system uses a single data access rule that applies universally to all delegates based on their organizational relationship. Instead of creating individual access rights for each user, the rule dynamically identifies constituents for any delegate and applies the same access logic across the entire organization, making the system scalable and adaptable.
2Adaptability or versatility
If individual access rights are granted to specific users, then authentication can be controlled, but the system becomes less scalable
Solution Approach 1:
The system changes the parameter of access control from individual user-based to role-based. Instead of managing access rights for specific individuals, the system uses organizational data to identify delegates and their constituents dynamically. This parameter change enables scalability while maintaining secure access control, as access rights are now tied to organizational roles rather than individual users.
3Productivity
If manual rule creation is required, then access control can be configured, but efficiency is reduced
Solution Approach 1:
The system performs self-service by automatically querying organizational data to identify delegates and their constituents. The computational system autonomously determines access rights based on pre-existing organizational relationships, eliminating the need for manual rule creation and significantly improving access management efficiency.
Data Source
AI summary
Methods, systems, devices, and tangible non-transitory computer readable media facilitating dynamic restriction of a viewer's access to survey responses provided by respondents of a survey based on the viewer's relationship with each respondent. In an example embodiment, the disclosed technology can: generate a survey data object that specifies a set of participants and a set of delegates associated with a survey; define, for a delegate in the set of delegates, a data access rule that specifies a subset of participants in the set of participants that are constituents of the delegate; receive, from the delegate, a request to access survey response data; evaluate the data access rule to identify the constituents of the delegate; filter the survey response data to extract constituent response data corresponding to the constituents of the delegate; and/or return the constituent response data to the delegate.