#16 Intermediate "Supervisor" role
An additional Notes section and role "Supervisor". This additional notes field would be viewable only by someone with the Supervisors role and Admin. This would serve to fill a mid-tier manager access system.
In our particular case, we have a systems administrator that manages all the information and credentials. We also store extremely sensitive customer information within the records. Our end users need only see the basic credentials as they do now but we would like to have an additional [security] field that only their managers see. Example:
Credential: Bank Account, Online Login
End User: Username/password (standard credentials view)
Supervisor: Standard credentials view+ "Supervisor Notes" field that contains Security Questions/Answers for the customer account
Staff only need access to login and take actions. A supervisor would use the additional information to validate a computer for access to the account.
Hmm makes sense. Ok.. so I'm thinking this could be done by adding a concept of "Group Comments". They will be comments on a resource that are associated with a particular Group. Then anyone who looks at that resource who is a member of that Group will see and be able to edit the Group comments. So for your use case you would create a "Supervisor" group.
What do you think?
Yes that would work. I think if you base it around your "admin" and "user" designation (add a new "supervisor" role) it would work and flow with what your already doing. Giving administrators the ability to select a specific role for each user. Going a little further; if it is worth the time you could create the ability for administrators to create roles and assign permissions to custom roles. That would accomplish the same thing and offer a more custom solution for the masses.
Got it... Makes sense. Thanks for the great feed back. OK. I'll have to see what I can work in. I'll get this in some how. I like it.