How do you restrict access to portions of a dataset, so that users can view some rows or columns, but not others? For example, suppose you want to maintain cohort blinding by prohibiting particular users from viewing the Cohort column in a study; or suppose you want clinicians to view only data for locally enrolled participants, while hiding participants from other localities.
While LabKey Server does not currently support column-level or row-level
permissions, you can restrict user access to subsets of a dataset using the following methods:
Create a Filtered Report/View
Disallow direct access to the dataset, and create a report/view that shows only a subset of rows or columns in the dataset. Then grant access to this report/view as appropriate. For details, see
Configure Permissions for Reports & Views.
Linked Schemas
In a separate folder, expose a query that only includes a subset of the rows or columns from the source dataset using a Linked Schema. For details see
Linked Schemas and Tables.
Protect PHI Columns
When a column contains PHI (Protected Health Information), you can mark it with the appropriate level of protection:
- Limited PHI: Show to users with access to a limited amount of PHI
- Full PHI: Show to users only if they have access to full PHI
- Restricted: Show only to users with access to Restricted information
Set the PHI Level for columns in the user interface, or using
XML metadata. When you publish a version of the study, you select whether to exclude those columns. The published study will be exposed in a separate folder; grant access to the separate folder as appropriate. For details see
Publish a Study: Protected Health Information / PHI.
Premium Features AvailableSubscribers to the Enterprise Edition of LabKey Server can use PHI levels to control display of columns in the user interface. Learn more about this and other
Compliance features in this section:
Learn more about premium editions