iSAMS have now rolled out a uniform Export Wizard facility across different modules. Within Pupil Manager we have the ability to lock down the ability to export data from the module (Process Security). This is very important as there are only some areas within Pupil Manager that staff should have access to, but the export facility essentially gives access to all fields relating to the pupil record.
There is no ability to refine the exportable fields available to a user based upon, e.g. their particular security group membership. This is a global setting which is configured within the Pupil Manager module itself.
The Student Registers module also uses the Export Wizard and uses the same configuration settings provided within the Pupil Manager module.
First, there are only some members of staff who need to be able to export data from the Student Registers module. These are the staff who have responsibility for maintaining individual registers. Very few others need that ability. If staff are to be able to see shared information from a register (e.g. via an attendance register), then they need to be given at least Read access to the Student Registers module, but this immediately gives them access to the Export Wizard.
So, we need the equivalent of Process Security for the Student Registers module.
The wrinkle here is that this actually needs to be on a register-by-register basis, precisely because the ability to export information needs to be related to whether or not that member of staff is responsible for maintaining that register.
However, the settings within Pupil Manager controlling which fields are available in the Export Wizard apply globally and not specifically for the module in which the Export Wizard is being used.
That means staff have a way of bypassing the security settings in Pupil Manager (i.e. only having visibility on certain fields in the pupil record) simply by going to the Student Registers module and performing a bulk export. Moreover, these exports can be performed for any pupil, regardless of whether they are on the register and regardless of whether they are current.
What we really need is a way to control which fields can be exported using the Export Wizard on a module-by-module basis. Staff that use the Export Wizard in Pupil Manager and the Admissions Manager (in our case) really do need access to a lot of pupil fields, but those who use the Student Registers module, really only need a limited collection of fields.
However, the use of the Student Registers module is much more specialised and we are finding that staff who would not normally be able to see certain data points about pupils can now do so.
