Wonde and GCSEpod

[djrscally]

Yeah I just find it absolutely mad that they just blindly ask for all the permissions regardless of what the app is going to be used for.

 

In their current guidance docs they ask for:

a. Assessment Co-Ordinator

b. Personnel Officer

c. School Administrator

d. Senior Management Team

e. Third Party Reporting

 

Which gives them access to practically everything. I just don't understand how they can justify it.

 

I think they're just assuming that people will move their data sharing barriers to Wonde and control who has access to what from them rather than at the MIS level and are a new enough company that they don't get the message right when talking to schools. I got the same thing from Groupcall actually, just not so slapstick.

[howartp]

We're going through GCSEPod setup at the moment.

 

They now use Groupcall XOD (Xporter-On-Demand), not Wonde.

 

I'll see tomorrow what this is like when they ring/email me.

 

Peter

[deKay]

The "trick" with Wonde is to create a specific user in SIMS and only give that user access to the bare minimum necessary. Basic data protection principle. Why Wonde don't do this by default, especially given GDPR, baffles me.

 

FWIW, we went to Hegarty Maths this week having used Wonde previously (with this setup) for Diagnostic Questions, and adding Hegarty involved an email from them saying Wonde will email me asking for authorisation, and that email from Wonde.

 

So I'm all for how easy it is, but horrified at the lack of basic data control in place.

[GREED]

I got the same thing from Groupcall actually, just not so slapstick.

 

Just wait, I'll send you some emails

[GREED]

So I'm all for how easy it is, but horrified at the lack of basic data control in place.

 

Easy is great. Xporter (Xporter on Demand) has just as simple an authorisation/consent process.

 

However easy over authorisation, for an authorisation-related process, I would not assume is the way you would want it

[gh5000]

Even with the old groupcall which has the 'full' permissions (same as wonde wants) at least it gave you visibility of the reports being ran in its log and you could load those reports in SIMS to see what's leaving your school Edited March 13, 2018 by gh5000
Mobile sent too soon

[djrscally]

Even with the old groupcall which has the 'full' permissions (same as wonde wants) at least it gave you visibility of the reports being ran in its log and you could load those reports in SIMS to see what's leaving your school

 

Doesn't the new XoD require full permissions also? I got told it does.

[MK-Jester]

The "trick" with Wonde is to create a specific user in SIMS and only give that user access to the bare minimum necessary. Basic data protection principle. Why Wonde don't do this by default, especially given GDPR, baffles me.

 

FWIW, we went to Hegarty Maths this week having used Wonde previously (with this setup) for Diagnostic Questions, and adding Hegarty involved an email from them saying Wonde will email me asking for authorisation, and that email from Wonde.

 

So I'm all for how easy it is, but horrified at the lack of basic data control in place.

 

So did you use specific SIMS access rights or did you create a custom access definition?

 

What did you find worded for you?

[gh5000]

My group has the following

Students - view on Basic details, view on Reg-Admission Number, view on Telephones and emails

Third party reporting - view

Staff - Basic details view, Employment details view, Timetable and academic classes view

Reports - all

Curriculum - view all

 

I'll PM you the file I got from Wonde yesterday that lists all the items they are reading from SIMS and sending to GCSEPod. I got this for another service and found they were taking Employees ethnicity, Employees next of kin and Employees religion which the other service has said isn't necessary. Not sure why but its necessary to run a trip but this other service takes student religion and ethnicity too. Only way to get visibility of this was to check with Wonde.

[deKay]

So did you use specific SIMS access rights or did you create a custom access definition?

 

What did you find worded for you?

 

I created a custom group with one user in it.

 

They have access to as little as possible there - student and staff basic details, curriculum, timetables, reports, third party reports.

[Ditto]

I need to join the Wonde party. I've had a request to have an online meeting with Wonde to set up access to Progresso. This has come about as a result of EEDI running a project which I understand links back to Diagnostic questions mentioned elsewhere in this thread. I've fired off a number of questions and so far the only response is 'Yes, we can interface with progresso'. I'm awaiting details on the potential costs to parents, data extraction, frquency of calls to progresso's API etc. etcIt appears some of you have found solutions by having a specific restricted user to control the outflow of your data. Has anyone any thoughts on how this would work in the progresso world. I don't want to stand in the way of the Maths departments work, but equally I don't want to expose all our data when there is no need. In addtion, for this project EEDI link to their privacy policy - is it me, or is the stuff about advertising in sections 6 and 7 contradicting itself?

[djrscally]

I need to join the Wonde party. I've had a request to have an online meeting with Wonde to set up access to Progresso. This has come about as a result of EEDI running a project which I understand links back to Diagnostic questions mentioned elsewhere in this thread. I've fired off a number of questions and so far the only response is 'Yes, we can interface with progresso'. I'm awaiting details on the potential costs to parents, data extraction, frquency of calls to progresso's API etc. etcIt appears some of you have found solutions by having a specific restricted user to control the outflow of your data. Has anyone any thoughts on how this would work in the progresso world. I don't want to stand in the way of the Maths departments work, but equally I don't want to expose all our data when there is no need. In addtion, for this project EEDI link to their privacy policy - is it me, or is the stuff about advertising in sections 6 and 7 contradicting itself?

 

You don't need to expose everything. I just ignored the direction to grant access for everything and just granted access to the bits I thought the software we were linking to Wonde would need, and it works fine.

[Ditto]

How is that achieved? Do you create a user with a custom role which is restricted to pull only certain data and provided that user to Wonde? Do you need to work with progresso support to approve the API? Currently we have no 3rd parties using Web API v2 and just couple listed under API licenses.

[fiza]

We have jsut had Wonde installed for Hegarty Maths and Wonde give you a portal signin where you can see exactly what data Hegarty are pulling. @GREED does Groupcall give this same level of visibility? I ask as we have another service which uses GroupCall XOD.

[djrscally]

How is that achieved? Do you create a user with a custom role which is restricted to pull only certain data and provided that user to Wonde? Do you need to work with progresso support to approve the API? Currently we have no 3rd parties using Web API v2 and just couple listed under API licenses.

 

No it's similar to the API Licenses; you go to System | Web API V2 | Manage Companies Access then hit add and pick "Wonde" as the company, then fill in a Username (IIRC they have a specific format like "Wonde dfe+estab" they want you to use) and just tick the boxes that are listed to grant access to each area of the database. Progresso then emails them the password for the Username that you set up and they can start calling the API immediately. No need to involve Advanced unless they forget the password.

 

We have jsut had Wonde installed for Hegarty Maths and Wonde give you a portal signin where you can see exactly what data Hegarty are pulling. @GREED does Groupcall give this same level of visibility? I ask as we have another service which uses GroupCall XOD.

 

I think you can download the logs from https://login.groupcall.com/

[Ditto]

Thanks @djrscally. That sounds promising. Current I get "You do not have sufficient privilege to perform this operation."on Web API V2 but I'll log that with support (I have checked role permissions and they look fine). Edited March 29, 2018 by Ditto

[fiza]

I think you can download the logs from https://login.groupcall.com/

How do you get a login for that portal? i was never sent one.

[Ditto]

then hit add and pick "Wonde" as the company, then fill in a Username (IIRC they have a specific format like "Wonde dfe+estab" they want you to use) and just tick the boxes that are listed to grant access to each area of the database. Progresso then emails them the password for the Username that you set up and they can start calling the API immediately.

OK - we're getting somewhere, slowly.They're in the list, but just as

Bug 1 - you can't access the API setting from a custom role even if the settings say you can. Solution: You have to use the OOTB administrators role. Apparently it's a known defect. Sigh!! - then why not fix it!

Bug 2 - the Functionalities filter does not work - Sigh2!! I can't even be bothered to report it!

Bug 3 - the column filter does not work - Sigh3!!

Bug 4 - the records per page does not work - Sigh - I'm beginning to sound like my asthma has come back! Actually, on this one let's hope they don't fix; it's quite nice not having to change records from 20 to something useful. Perhaps they should try this elsewhere in the system:rolleyes:

 

I know each is relatively minor, but I just wish the developers and testers did a better job on this stuff - this is about as simple a page as you could get.

 

Anyway, back on topic, there are 124 functionalities - I've asked for documentation as I'd like to know which ones provide what data.

Edited March 29, 2018 by Ditto

[djrscally]

OK - we're getting somewhere, slowly.They're in the list, but just as

Bug 1 - you can't access the API setting from a custom role even if the settings say you can. Solution: You have to use the OOTB administrators role. Apparently it's a known defect. Sigh!! - then why not fix it!

Bug 2 - the Functionalities filter does not work - Sigh2!! I can't even be bothered to report it!

Bug 3 - the column filter does not work - Sigh3!!

Bug 4 - the records per page does not work - Sigh - I'm beginning to sound like my asthma has come back! Actually, on this one let's hope they don't fix; it's quite nice not having to change records from 20 to something useful. Perhaps they should try this elsewhere in the system:rolleyes:

 

I know each is relatively minor, but I just wish the developers and testers did a better job on this stuff - this is about as simple a page as you could get.

 

Anyway, back on topic, there are 124 functionalities - I've asked for documentation as I'd like to know which ones provide what data.

 

On mine there's 4 identical rows for each area for some reason

 

If you get the docs let me know - I keep meaning to ask.

[Ditto]

Mine are at least unique rows! I'll let you log that one. I'll keep you updated on documentation.

[djrscally]

How do you get a login for that portal? i was never sent one.

 

Missed this yesterday sorry. Mine was given to me when we first started with XoD - I imagine you can just email their support team and they'll get it set up.

[GREED]

We have jsut had Wonde installed for Hegarty Maths and Wonde give you a portal signin where you can see exactly what data Hegarty are pulling. @GREED does Groupcall give this same level of visibility? I ask as we have another service which uses GroupCall XOD.

 

Apologies late to respond.

 

Yes absolutely, in Xporter's School Portal, you not only authorise data scopes but can then see who has what data, where it is located, and with tools to revoke some or all access if you want. This is for ALL vendors who are connected to your data using Xporter or Xporter on Demand - which currently is over 100 suppliers (so a good change most if not all your vendors will be in there).

[GREED]

How do you get a login for that portal? i was never sent one.

 

The URL you want is https://manage.groupcall.com

 

If you have XOD with any partner you should have a login, if not then yes just give our helpdesk a ring and they can sort you out.

[howartp]

The URL you want is https://manage.groupcall.com

 

If you have XOD with any partner you should have a login, if not then yes just give our helpdesk a ring and they can sort you out.

 

Your username is likely ESTAB-xxxyyyy where xxxyyyy is your LEA number (eg 815-4210).

 

We apparently already had one even before we signed up for XOD, but I never knew about it / what it was.

[fiza]

Your username is likely ESTAB-xxxyyyy where xxxyyyy is your LEA number (eg 815-4210).

 

We apparently already had one even before we signed up for XOD, but I never knew about it / what it was.

Same here. After a conversation with Groupcall it would seem i had an email back in November when XOD was set up but as you I didn't realise what the login was for.