Permissions and Data Isolation for District Teaching Research and Classroom Reviews: Compare Documents and Locate Differences

Teaching Reviews: review permissions for document checks. Check source versions, input mappings and the values received by downstream nodes.

What this category's data looks like

In the scenario of district and county teaching research activities and classroom observation and evaluation, materials usually consist of three types: teaching research activity notices, classroom observation records, and classroom evaluation minutes. Notices are issued by the teaching research department and contain the activity name, time, location, participants, and signature fields; classroom observation records are filled in by observing members and contain the instructor, class, period, observation dimensions, and handwritten signature; classroom evaluation minutes are summarized by the moderator and contain review points, conclusions, and receipts. The three types of materials are archived by activity batch, and the update rhythm is: notices are issued before the activity, records are filled in during the activity, and minutes are supplemented after the activity. It often happens that the name, quantity, or date of the same record do not match across two materials, or the version is not synchronized, or signatures or receipts are missing. After the materials enter this feature, the notice serves as the baseline ledger, and the classroom observation records and classroom evaluation minutes serve as the objects to be verified. After being filtered item by item according to member permissions, they enter the file list and retrieval for use in discrepancy localization.

Configuration and implementation checks

Enable commercial file permissions and give the member read access to the knowledge base.

This step is executed by member permissions and file-level permissions (server-side authentication), and outputs the set of visible files filtered by member. The discrepancy list is then completed by subsequent AI nodes, code nodes, or manual work; the file list and retrieval only return the readable set filtered by member.

ObjectCheckVerification action
Teaching research activity noticeCheck whether the activity name, date, number of participants, and signature fields in the notice are consistent with the ledgerUse the creator account to view the notice details, record the name, quantity, and date fields, and compare them item by item with the ledger
Classroom observation recordCheck whether the instructor, class, period, date, and signature in the classroom observation record are consistent with the noticeUse a restricted member account to view the list and details, confirm that this member can only see records for which they have read permission, and record the discrepancy fields
Classroom evaluation minutesCheck whether the review points, conclusions, date, and receipt in the classroom evaluation minutes are consistent with the classroom observation recordUse a restricted member account to search for the same activity name, confirm that unauthorized minutes will not be recalled, and then compare the receipt and signature
File list and retrievalReturn the set of visible files filtered by member; deletion is limited to the creatorUse a collaborator account to try deleting a file not created by the creator; it should be filtered and a prompt should appear; check the authentication configuration of the workflow and nodes

Three common errors

  • Symptom: a restricted member saw files they should not see. Cause: viewing the list and details requires knowledge base read permission plus file read permission, and filtering was not done item by item by member or the authentication configuration did not take effect.
  • Symptom: retrieval recalled unauthorized files. Cause: retrieval filtering only takes effect when authenticating as the current member; in scenarios where the knowledge base is preselected in the workflow and authentication is not performed by member identity, file-level filtering is not done.
  • Symptom: the name, quantity, or date of the same record do not match across two materials, and the version is not synchronized. Cause: notices, classroom observation records, and classroom evaluation minutes are updated separately; when signatures or receipts are missing, the ledger is not written back, and discrepancies are not localized.

How to verify the setup

Feature acceptance: use a restricted account to view the list and retrieve once, check the visible scope, and confirm that only files for which this member has read permission are returned; unauthorized files do not occupy a place and are not recalled.

Business test: use one real record to find fields inconsistent with the ledger, record discrepancies in name, quantity, date, and signature receipt, and submit them to the reviewer for confirmation and write-back.

  • Use a restricted member account to view the file list and details, check whether the returned set is filtered by member, and record the visible scope corresponding to teamId and tmbId.
  • Use a collaborator account to try deleting a file not created by the creator, confirm that it is filtered and a prompt appears; then use a restricted member account to search for the same issue and confirm that unauthorized files are not recalled.