Limiting Data Edit Permissions for a Feature Service

Question

Hi,

I have a couple of surveys (Survey123) shared with all our employees. They cannot edit submitted data in the Survey123 website "Data" tab/menu, but if they navigate to the survey's feature service in AGOL, then after displaying the data table in Map Viewer, they can edit data in any of the fields that exist in the feature service. Is there a way to revoke that permission from the users?

To summarize, they all need to be able to 1) submit their surveys, 2) view survey data in the "Data" tab in the Survey123 website and 3) access a survey's feature service in AGOL with read-only permission. Are there any particular settings I have to change in AGOL or Survey123 website to achieve that? Please advise!

Thank you!

Anna

MarkBockenhauer · Answer

Anna,

I am able to reproduce the deletion of attachments as you describe, given the settings users should not be able to delete attachments for existing features.  I have alerted the online team, and they will address.

thank you for bringing this to our attention.

Mark

Sierra · Answer

Hi Mark,

the permissions on the feature service are set up exactly to what you advise above; the survey users login with one account assigned to a "user" role (vs 'data editor' or 'publisher').

These are the steps to get to the area where they can add/delete attachments (even when "what kind of editing is allowed?" is set to 'add features'):

1. navigate to the feature service and open it in map viewer

2. click 'show table' right below the site images service => the data table gets displayed in the lower pane under the map

3. all tabular data columns have a lock icon before the column name, except for the 'Photos and Files' column; the latter displays 'Add' (no images) or 'Show' (1+ images attached to the record)

4. clicking on the 'Show' link opens the 'Photos and Files' dialog with images listed on the 'View' tab. Each image has an 'x' sign on the right which allows to permanently delete an image.

Thank you for your help!!

MarkBockenhauer · Answer

Anna,

They shouldn't be able to modify the attachments either... what are the permissions that you have set? and how are your users defined... what are their roles?

Mark