Separate Permission for Grade Entry vs. Markbook Structure Editing

@Ali @sandra

Summary:
Currently, users with edit permissions (e.g. Edit Markbook_singleClass) can:

  • Add, edit, or delete Markbook columns

  • Enter and modify student grades

I would like to request a separation of these capabilities into distinct permissions.


Description:
Introduce a new permission that allows users to:

  • Enter and edit grade data only

  • Export Markbook data (e.g. to Excel)

While restricting them from:

  • Adding new Markbook columns

  • Editing existing column structure/settings

  • Deleting columns


Use Case:
This would be especially useful in schools where:

  • Teachers or assistants are responsible for data entry only

  • Academic coordinators or administrators manage assessment structure

  • There is a need to prevent accidental structural changes


Problem Statement:
Currently, granting edit access to allow grade entry also enables users to modify or delete Markbook columns.

This can lead to:

  • Accidental deletion or modification of assessment columns

  • Loss of data or structure that is difficult to restore

  • Additional administrative overhead to correct unintended changes


Benefits:

  • Improves data integrity and system reliability

  • Reduces risk of accidental structural changes

  • Supports role-based workflows (e.g. teacher vs. coordinator)

  • Aligns with best practices in permission granularity


Suggested Implementation (Optional):

  • Split current permission into two:

    • Edit Markbook Structure (columns, settings)

    • Enter Markbook Data (grades only)

  • Ensure users with “data entry only” permission can still:

    • View all columns

    • Input/edit grades

    • Export data


Closing:
This enhancement would provide safer and more flexible permission control, especially for schools with distributed grading responsibilities.

Thanks