Idea sandbox Idea sandbox
Popular ideas Popular ideas
Ideas in development Ideas in development
Implemented ideas Implemented ideas

Ideas in development Here are ideas about LimeSurvey that have been marked as already implemented by the moderators.

Disable conformation emails  
Written by Vincor67 the 6 Oct 11 at 09:36. Global category: Authentication. Already implemented
I make surveys for my clients. We promise the people who participate that the reports I make are anonymous. But some users question this anonymity when they receive a conformation email.
0
votes
closed
Solution #1: Make an option to block conformation emails
Written by Vincor67 the 6 Oct 11 at 09:36.
Make an option to block conformation emails

See the 1 comments or propose a solution >>

Separation of concerns: Survey Creation vs. Token Mgt.  
Written by plbt5 the 18 Apr 11 at 13:45. Related project: 2.x all. Already implemented
For larger organisations or specific projects the persons creating the survey do not necessarily equal the persons managing the survey. We have met several situations where our customer would like to get full control of inviting participants.
0
votes
closed
Solution #1: Add Token Mgt. to Survey Security Mgt.
Written by plbt5 the 18 Apr 11 at 13:45.
Add an extra column in Survey Security Management to explicitly authorize a person to access token management for that survey.

Add a comment or propose a solution >>

Force SSL for admin login  
Written by Pat Redmond the 13 Oct 10 at 12:02. Related project: 1.x all. Already implemented
I noticed there are several old posts on the forum (which have been locked) where people ask for this. I would suggest adding the following code to admin/admin.php - possibly with the option of a flag to specify whether or not secure login is required. The same could be done for individual surveys, so the admin could specify which surveys would be forced to be completed securely and which would not.

0
votes
closed
Solution #1: suggested code for forced secure admin login
Written by Pat Redmond the 13 Oct 10 at 12:02.
// redirect to secure site
if($_SERVER["HTTPS"] != "on")
header("HTTP/1.1 301 Moved Permanently");
header("Location: https://" . $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"] );
exit();



This could include something along the lines of
if (@secure_login == "required")
...code goes here...


code can be added to admin/admin.php and/or config.php

Add a comment or propose a solution >>

Custom / Choice of admin dir  
Written by lovepade the 2 Aug 10 at 12:27. Related project: 1.x all. Already implemented
For various (e.g. security) reasons it might be a good idea to change the default admin directory from www.myserver.com/admin to something else.

0
votes
closed
Solution #1: User choose name of admin dir
Written by lovepade the 2 Aug 10 at 12:27.
The codebase seams to be somewhat prepared for this - but not fully. cf. forum topic: http://www.limesurvey.org/support/forums/5-can-i-do-this-with-limesurvey/45939- change-admin-login-page


Add a comment or propose a solution >>

Improving labelset access rights management  
Written by oddible the 29 Sep 09 at 17:47. Related project: 1.x all. Already implemented
From my understanding there is no way to create Array-type questions without using a Label Set. And Label Sets are global to the site. Therefore, if the Label Set doesn't exist I need to give my researchers access to Create / Edit Labels. This creates some problems:

1. A user may edit and change a label set that another user has in an active survey thus invalidating his results.

2. Users create SO MANY label sets that the list of existing label sets becomes functionally useless because it is impossible to find one that works for you (due to poor naming convention and overly specific label set creation).
(This issue is raised in a separate solution:
http://ideas.limesurvey.org/ideatorrent/idea/16/)

2
votes
closed
Solution #1: Some recommentations that would help:
Written by oddible the 29 Sep 09 at 17:47.
a) Separate the Label Set permission into two permissions: Create and Edit. That way users can create new ones but not mess up other people's existing ones.

b) Allow Label Set definitions that are User Specific or Survey Specific.

c) A button to copy labelsets to simplify the export/import alternative

d) locking a labelset (duplicate?) once a survey uses it for all but that survey's users with labelset rights

My only concern with these is creating too many duplicates of Label Sets.
0
votes
closed
Solution #2: Other ideas
Written by Kemmotar the 12 Oct 09 at 12:09.
Like oddible I think the best way to solve this problem is to change the way LimeSurvey manage LabelSet permissions.

Separate create/edit roles could be an good idea but I think this could be best used at group level instead on global level. With this solution one user could have edit role in his group but not in others.

- Create scenario: when one user create a labelset he has to set what group the LabelSet is associated with, chosen between groups in which the user is enrolled.

The rights are assigned in group page, adding another button beside the "Delete" one. This new button redirect to an another page in which the right (by now only this only one right, maybe other in the future) has to be set.

An user without administration role will view labelset in the list only if he has labelset edit role for that group.

In the database we have to modify LabelSet table adding two columns: "owner_id" and "ugid", which identify the labelset creator and the group associated to the labelset. Then we should create table lime_user_groups_rights, in which there are three columns: ugid [int], uid [int], edit_label[tinyint]. The latter identifies the editing right.

Kemmotar

Add a comment or propose a solution >>