Jump to content
Home
Forum
Join Us
What's New
Articles
Resources
About Us
Tapestry
Lauren

Someone says they can see observations relating to a child that they should not be able to see

Recommended Posts

If someone can see an observation they shouldn't be able to see, there are a few things you can check to make sure that everything is set up correctly. If you're confident when it comes to using Tapestry, and it only seems to be affecting one user, you might be better off checking the things I'll describe to you in this tutorial first as they are the most likely causes behind it. However, if you're new to Tapestry or you think it's affecting a few users please get in touch with us as soon as you can - that way we can deactivate your entire account while we investigate. 

To get in touch with us, you can either use the 'Contact us' page in the drop down list from your name, or send an email to customer.service@eyfs.info. If you do send us an email though please make sure you message us from the email address you or another manager uses to sign into Tapestry - that way we will be able to help you a lot more quickly and efficiently because we will know we're speaking to the right person. 

image.png

 

When you do contact us please use the 'in brief' text box or subject line to make it clear this is an issue about security. We keep an eye out for those ones. So for example you could say 'Account Breach' or 'Wrong person seeing observations '.

Within the body of the text please try to give us as much detail you can about who is affected and in what way.

 

image.png


So, onto the things you can check.

The first thing is that the correct child has been linked to the observation. If several children have been linked to the observation remember that the relatives and key workers of all those children will be able to see it. 

You can do that by finding the observation on your 'Observations' page and looking at the green boxes under the notes section in the preview. If there are quite a few children linked to it you may have to click on the button that says 'and x more' to see all the children's names. If the children are wrong then use the 'Edit' button to change who is connected to the observation. As soon as an incorrect child has been removed from an observation their relatives will no longer be able to see it on their Tapestry account. 

 

image.png

 

If only the correct child is linked to the account then start by removing that observation from the journal. That way you can be sure that no one other than people set up as staff will be able to see it. You can do that by clicking on the cog along the line from the title and choosing 'Remove from journal'. 

 

image.png



If the someone who can see an observation they shouldn't be able to see is a relative on your account

At this point, you should check which child/children the relative is linked to. You can do that from the 'Manage Relatives' section of the control panel by finding them in the list and looking below their name at the green boxes. In my example you can see that the mother, Abbie Anderson, is linked to Aiysha Anderson and Georgia Bennett. 
 

image.png

 

If that is incorrect, then you can edit who the relative is linked to by either clicking on the 'edit' button next to their name and scrolling down to the bottom of the page that takes you to, or the 'Manage Relationships' button at the top of the page.

image.png


If that is correct though, your next step should be to deactivate the relative. Because at this point it's still not totally clear what has happened, the safest thing to do is to deactivate all the relatives. That way, in the unlikely event that an issue with Tapestry is causing relatives to be able to see data they shouldn't be able to, then they won't be able to log in. You will be able to reactivate them again later without much work. 

To do so, use your 'Filter & Sort Relatives' bar (you can't really see it in the screenshot below, but it's where the first red arrow is pointing) to look for relatives with the status 'Active'.

 

image.png

 

Then scroll to the bottom of the relative list and select to see 'All'.

image.png

 

You'll then be able to select 'All' and choose to make them all 'inactive'.

image.png

At this point, if you haven't contacted us yet, please do. 
 

 

If the someone who can see an observation they shouldn't be able to see is a staff member on your account

In this case you first need to make sure that they are set to only see their 'key children' and that the correct children are in their key children group. 

To do that, you need to start off by going to the 'User Permissions' section of the control panel.

image.png

 

Then scroll down until you get to the 'Children' section and make sure that 'View children who are not key children' is set to 'Not Permitted' and that no one has been individually permitted. If you need to change anything there, just click on the 'Edit' button along the line from the title. 
 

image.png


If that is set up correctly (it will have to be 'not permitted' if you want to limit who each staff member can see), go to the 'Manage Staff' page and use the 'Manage Key Children' button to make sure that each staff member is only linked to the children that they should be. 

 

image.png


If you need to change any of those key children groups you can do so by clicking on the 'Edit Relationships' button next to the staff member who the change needs to happen for. 
 

image.png

 

If after following those steps you think everything is set up correctly, and the staff member has been set to not see the observation in question for a safeguarding reason, you should deactivate them and any other staff members who are also restricted in case there is an issue with Tapestry. To do that just use the cog along the line from their name in the 'Manage Staff' section of your control panel and choose 'Make Inactive'.

image.png


At this point, if you haven't contacted us yet, please do. 
 

We will respond to your message as soon as we see it, at which point we will take you through the next steps either over email or over the phone if possible. 

While you wait to hear back from us though, you can continue to investigate. 

To do that, you need to go to your 'Events' in the control panel. 

image.png

 

You can use the 'Filter & Sort Events' bar to search for the observation in question and see a full history of it. 

image.png


What you might see is that the wrong child was initially linked to it, which was why the relative/staff member could see that observation. If the incorrect child has now been removed, the relative/staff member shouldn't be able to see the observation anymore, but it's worth checking with the relative/staff member that that is the case.

If you have the related issue of a parent has seen an observation which hasn't been published yet, you'll be looking out for it being published, then removed from journal, either through a purposeful status change, or though a staff member who needs manager approval to publish observations editing it (that would cause it to be taken out of the journal).
 

If you do find the cause behind the problem and are able to make the changes necessary so that only the people who should see observations can see them, then you can reactivate any users that you have deactivated and re-add and observations to the journal that you have taken out whilst investigating. 

This tutorial will help you to reactivate staff and this one will help you to reactivate relatives. 

Share this post


Link to post
Share on other sites
View download stats
  1. image.png (0)
  2. image.png (0)
  3. image.png (0)
  4. image.png (0)
  5. image.png (0)
  6. image.png (0)
  7. image.png (0)
  8. image.png (0)
  9. image.png (0)
  10. image.png (0)
Guest
This topic is now closed to further replies.

×