Sharing and Embedding for Public Vocational Skills Level Assessment: Manage Authorized Access and External Services

Skills Certification: review sharing & embeds for authorized access. Check source versions, input mappings and the values received by downstream nodes.

What this category's data looks like

This page addresses authorized access and external services for social assessment of vocational skill level certification, involving three types of materials: assessment implementation plans, candidate registration forms, and assessor dispatch forms. The assessment implementation plan records the certification occupation, level, assessment method, and schedule, and serves as the basis for the authorization scope; the candidate registration form carries the candidate's identity, declared level, and contact information, and determines the boundary of individual information visible externally; the assessor dispatch form records the assessor's name, affiliated organization, dispatch date, and signature, and is used to verify the dispatch relationship. The materials are generated by the assessment organization during the registration and examination administration stages, are updated with each batch, and the fields include name, quantity, date, and signature fields. When entering the sharing and embedding feature, the three types of materials respectively serve as the authorization object, the identity matching basis, and the source of signature receipts; the display items only control the presentation of snippets and full text, while the file visibility scope is still determined by file permissions.

Configuration and implementation checks

This step is executed by the sharing link in the publishing channel (the publishing service performs authentication), outputting the sharing link, display parameters, and authentication result. The externally accessible entry point and authorization scope must be completed next based on what content external visitors see according to their identity. The link can be configured with an expiration time, per-minute access limit, point limit, identity verification, and display items for quoted snippets, quoted full text, and source original text; the authentication result determines which display contents the visitor can see.

ObjectCheckVerification action
Assessment implementation planCheck whether the name, level, date, and signature are consistent with the candidate registration formCompare the occupation name, level, and assessment date in the two materials, and check the signature and receipt
Candidate registration formCheck whether the candidate name, declared level, and quantity match the assessor dispatch formCompare name, level, and number of people item by item, and check whether the versions are synchronized
Assessor dispatch formCheck whether the dispatch date, assessor name, and signature receipt are completeCheck whether the dispatch date is consistent with the time in the implementation plan, and confirm that signatures are complete
Sharing linkCheck the expiration time, per-minute access limit, point limit, and identity verification callbackAccess once each with an unauthenticated session and an over-limit request, and check the release and quote display of the link corresponding to shareId

Three common errors

  • Symptom: The same candidate's name and level do not match between the registration form and the dispatch form. Cause: The two materials are entered separately, versions are not synchronized, and signatures or receipts are missing.
  • Symptom: The link cannot be opened after a period of time. Cause: The expiration time has passed, or the per-minute access limit was triggered by over-limit requests, causing rate limiting.
  • Symptom: The quoted full text can be seen without logging in. Cause: The identity verification callback did not take effect, and the toggle states of the quote display items do not match expectations.

How to verify the setup

Feature acceptance: Access once each with an unauthenticated session and an over-limit request, and check whether the release result of the link corresponding to shareId and the display of quoted snippets, quoted full text, and source original text match the settings.

Business test: Access once with a restricted identity and see whether the visible scope matches the settings; the tokens of the quoted text are recorded separately, and array counts are not compared for equality.

  • In the link configuration, check the expiration time, per-minute access limit, point limit, and identity verification callback address.
  • Check the toggle states of quoted snippets, quoted full text, and source original text item by item, and confirm that file permissions and display items are independent of each other.