role-based access

Who Should See What: A Practical Guide to Access Control in Schools

Most schools give everyone access to everything. Here's the case for least-privilege access—what each role actually needs, why the DPA requires it, and how to put it into practice.