How do you restrict access to portions of a dataset, so that users can view some rows or columns, but not others? For example, suppose you want to maintain cohort blinding by prohibiting particular users from viewing the Cohort column in a study; or suppose you want clinicians to view only data for locally enrolled participants, while hiding participants from other localities.
While LabKey Server does not currently support column-level or row-level
permissions, you can restrict user access to subsets of a dataset using the following methods:
Create a Filtered Report/View
Disallow direct access to the dataset, and create a report/view that shows only a subset of rows or columns in the dataset. Then grant access to this report/view as appropriate. For details, see
Configure Permissions for Reports & Views.
Linked Schemas
In a separate folder, expose a query that only includes a subset of the rows or columns from the source dataset using a Linked Schema. For details see
Linked Schemas and Tables.
Protect PHI Columns
When a column contains PHI (Protected Health Information), you can mark it with the appropriate level of protection:
- Limited PHI: Show to users with access to a limited amount of PHI
- Full PHI: Show to users only if they have access to full PHI
- Restricted: Show only to users with access to Restricted information
Set the PHI Level for columns in the user interface, or using
XML metadata. When you publish a version of the study, you select whether to exclude those columns. The published study will be exposed in a separate folder; grant access to the separate folder as appropriate. For details see
Publish a Study: Protected Health Information / PHI.