Granular Case Security Discussion
Wlad opened the meeting by discussing a request from SA15 regarding the ability to hide individual high-profile cases from most users within an office while allowing access to only a small group of authorized personnel.
Current Challenge
Current security is primarily based on Case Type, allowing groups of users to access designated categories of cases. However, agencies are requesting the ability to:
- Hide individual cases
- Restrict visibility to only selected users
- Continue normal processing without impacting filings or workflow
Examples discussed included:
- High-profile criminal cases
- Celebrity cases
- Officer-related investigations
- Sensitive internal matters
Concerns with User-Level Security
Wlad explained that while restricting access appears straightforward, it introduces significant operational risks:
If only a few users can see the case:
- Deadlines could be missed
- Staff absences could prevent work from occurring
- Cases could effectively disappear from office oversight
Questions raised included:
- How should access be maintained when personnel change?
- How should reports account for hidden cases?
- How should notifications and document workflows function?
Rather than implementing a quick solution, Wlad requested additional requirements gathering from participating agencies.
Existing Circuit Practices
Users shared they already limits visibility for certain investigative case types, but these are generally pre-filing investigations rather than active criminal cases with:
- Clerk case numbers
- Arrests
- Warrants
This highlighted the distinction between restricting investigative matters and restricting active filed cases.
Discussion of Possible Solutions
Several ideas were discussed:
- Dedicated hidden case types
- Security groups
- User-specific permissions
- Partial visibility (hide evidence rather than entire case)
Wlad cautioned that adding another layer of security outside existing Case Type security could create maintenance and reporting challenges.
Rather than deciding immediately, the group agreed additional real-world scenarios should be collected before designing a solution.
STAC 3 Usability Enhancements
Wlad reviewed several improvements currently under development for STAC 3.
Case Selection Behavior
Beginning with the upcoming release:
- Clicking a case row will select the case.
- The Case Card will only open when clicking the designated icon.
This change addresses user complaints regarding accidental opening of Case Cards during navigation.
Faster Data Entry
The team acknowledged that users who primarily work with codes experience unnecessary delays caused by current dropdown behavior.
Future improvements will focus on:
- Faster keyboard-driven entry
- Reduced delays while typing
- Improved efficiency for experienced users
These changes are planned for a future release rather than the current version.
Magnifying Glass Search Improvements
Although the magnifying glass search allows searching by:
- Code
- Description
experienced users find the extra interaction slows workflow.
Additional improvements and shortcuts are being designed to streamline this process while preserving usability for newer users.
Document Merge Workflow Improvements
A significant discussion centered around document templates containing numerous checkboxes and selections.
Current Problem
Documents requiring many selections force users to:
- Open merged documents
- Manually check boxes
- Enter additional information
- Fix formatting issues
Proposed Future Solution
Rather than editing documents after merging, Wlad proposed creating a structured data-entry process where users would:
- Select options ahead of time
- Store selections within STAC
- Merge documents using stored information
Potential benefits include:
- Improved productivity
- Greater consistency
- Reduced formatting errors
- Better accountability for entered information
The concept remains under development, and feedback from agencies will continue to shape the design.
Request Module Completion Workflow
The group discussed questions arising after implementation of recent Request module changes.
Completion vs Status
Rafael clarified an important distinction:
Changing a Request Status does not complete the request.
Instead:
- Completion occurs only through the Complete Request action.
- Internal system status determines whether a request is considered closed.
Simply assigning a status such as:
- Complete
- Unsuccessful
does not close the request unless the completion process is used.
Results vs Comments
Rafael explained that:
Comments
Intended for initial request information
Results
- Intended for follow-up information
- Used to document outcomes
- Can be updated through the request workflow
This distinction helps maintain consistent tracking throughout the request lifecycle.
Editing Completed Requests
Several agencies reported situations where:
- A request was accidentally completed
- Additional information arrived later
- Supervisors needed to add notes
Once completed, requests cannot currently be edited.
Participants agreed this creates operational challenges.
Proposed Reopen Feature
Suggested the preferred solution would be an Undo Completion or Reopen Request function.
This feature would:
- Return a completed request to pending status
- Allow additional updates
- Be permission-based so only authorized users could perform the action
The group agreed this would better address accidental completion than allowing unrestricted editing of completed requests.
Q&A
Q: Can STAC currently hide an individual case from everyone except selected users?
A: Not currently. The existing security model is primarily based on Case Type. The team is evaluating more granular security options but is gathering requirements before implementing a solution.
Q: Why is granular case security complicated?
A: Restricting visibility to only a few users creates risks such as missed deadlines, unavailable staff, reporting issues, and cases effectively disappearing from normal office workflows.
Q: Will clicking a case automatically open the Case Card?
A: No. An upcoming release changes this behavior so clicking selects the case, while the Case Card opens only by clicking its icon. (RC-6)
Q: Are improvements planned for faster data entry?
A: Yes. Future releases will focus on reducing delays for users who primarily enter codes and rely heavily on keyboard navigation. (RC-7)
Q: Why are document templates with many checkboxes difficult in STAC 3?
A: Users must manually select numerous options after merging documents. The team is exploring structured input methods that capture selections before merging to simplify the process.
Q: Does changing a Request Status complete the request?
A: No. A request is only considered completed when the Complete Request process is used. Simply changing the status does not close the request internally.
Q: What is the difference between Comments and Results in a Request?
A: Comments are intended for initial request information, while Results are intended to document follow-up actions and outcomes throughout the request process.
Q: Can completed requests currently be edited?
A: No. Once completed, requests cannot be modified. The team discussed adding a permission based Reopen/Undo Completion feature to address accidental completion.
Future Collaboration Meeting: Revisit granular case security after additional requirements is collected.