Access Control for Person (Director and SI) Search

[steveburtch]

Users of both the director search and the beneficial owner search are considered competent authorities.

Our plan is to have a single search tool that allows searches for either or both directors and significant individuals.

However, some competent authorities will have access to director search but not SI search and vice-versa. Some will have access to both.

BC Registries will need a way to control access for the user depending on what they are authorized to view and search for.

Steps

Gather requirements - create an initial access control matrix for all competent authorities, confirm access requirements, define what grades of access are required, what data can be accessed by whom.

[steveburtch]

duplicate