Skip to content

docs: add TEI ownership and breaking-the-glass documentation - #4705

Open
karolinelien wants to merge 5 commits into
masterfrom
docs/tei-ownership-and-breaking-the-glass
Open

docs: add TEI ownership and breaking-the-glass documentation#4705
karolinelien wants to merge 5 commits into
masterfrom
docs/tei-ownership-and-breaking-the-glass

Conversation

@karolinelien

Copy link
Copy Markdown
Contributor

Summary

  • Documents tracked entity ownership: what it is, how the four program access levels (Open/Audited/Protected/Closed) affect what a user can see and open, and how it relates to the existing enrollment-transfer docs.
  • Documents the breaking-the-glass override flow for Protected programs, using the actual in-app copy ("Check for enrollments" / "This program is protected"), including a screenshot.
  • Fixes a stale line claiming a tracked entity redirects to the separate Tracker Capture app; the enrollment dashboard is native to Capture app now.

AI Assisted.

Test plan

  • Read through the new "Tracked entity ownership" and "Breaking the glass" sections for accuracy and tone
  • Confirm the screenshot renders correctly in the built docs site

karolinelien and others added 5 commits August 18, 2026 10:10
Document tracked entity ownership, how the four program access levels
(Open/Audited/Closed/Protected) affect what a user can see and open,
and the breaking-the-glass override flow with its actual in-app copy
and behavior. Also fixes a stale line claiming enrollment still opens
in the separate Tracker Capture app.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Move the ownership caveat earlier so it applies to the whole search
result list rather than being buried at the end of the View dashboard
bullet, spell out what a Closed vs Protected program actually shows
when access is denied, and drop em-dashes in favor of periods/colons.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
"Capture scope"/"search scope" are internal variable names, not terms
used anywhere else in this doc or in DHIS2's own user-facing guides,
which spell out "data capture access" and "search access" to an
organisation unit instead.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
@sonarqubecloud

Copy link
Copy Markdown

@karolinelien
karolinelien marked this pull request as ready for review August 18, 2026 14:22
@karolinelien
karolinelien requested review from a team as code owners August 18, 2026 14:22
@karolinelien
karolinelien requested a review from ameenhere August 18, 2026 14:22

### Tracked entity ownership { #capture_tei_ownership }

Every enrollment of a tracked entity in a program has an **owning organisation unit**. Ownership starts out as the organisation unit that first enrolled the tracked entity into that program, and changes if the enrollment is later [transferred to another organisation unit](#transfer-the-enrollment-to-another-organisation-unit). Ownership is tracked per tracked entity/program combination: the same tracked entity can be owned by different organisation units for different programs (for example, one facility could own a person's HIV programme enrollment, while a different facility owns the same person's MCH programme enrollment).

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

programme vs program


In practice, clicking **View dashboard** or **View active enrollment** from a search result doesn't always show the enrollment's content. For a Closed program you'll see an access-denied message if you don't have data capture access to the owning organisation unit. For a Protected program you'll see the breaking the glass prompt if you only have search access, or the same access-denied message if you have neither.

Even once you can open an enrollment, whether you can also edit it depends separately on the program's sharing settings; you may still see a **View only** label if you don't have write access.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"Even once you can open an enrollment" does not sound right..
A rephrase is needed I think.


![](resources/images/break-the-glass.png)

Once submitted, you get access to the enrollment for about 3 hours. This access is tied to your current browser session rather than the record itself: if you refresh the page or come back later, you may be asked to provide a reason again even if the 3 hours haven't elapsed. Every request is logged for audit purposes.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am not sure the current browser session stands.... I thought the access is 3 hours persisted in database 🤔 So the user will still have access after logout/login. (I'll confirm again).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants