Improve the permission options
A parent logged in through her parent account to Studio
Helper and was able to delete her daughters profile which in
turn deleted her registration and all her lessons from the schedule. If the parent had deleted herself or the family she would have deleted her invoices and all financial records associated with their registration at the school.
Since we have just given all our parents the ability to log into the system
I need this problem fixed immediately. My current settings do not give me an option for parent permissions in the people area that indicate this
should or should not be possible.
Studio Helper must prevent customers/third party users from deleting financial records/student records that are school property/data. I can't log onto my cellular billing site or ticketmaster account and delete an invoice or record of payment, nor should I be able to do that with my music lessons through Studio Helper.
This is an industry standard--get on it!!!!!!!!!!
I have created a ticket for this as permissions should not need to be checked for a parent or a student to have that ability. The programmers will fix this for us. Thank you bringing this to our attention.