Permission Slips for the entire unit are downloadable by non-leaders (Privacy & Security)

Permission slips for the whole unit are downloadable by non-leaders on a calendar event in Scoutbook Plus. The permission slip contains PII (personally identifiable information) like addresses and birthdates and should not be available to everyone in the unit.

This is an important issue that needs to be fixed immediately.

When I log into my non-registered parent account, I only see my son’s permission slip. Please provide the member number of the adult who can see the whole troop.

141455533 This person reports being able to download the entire unit’s permission slips before being made a den leader.

I also see in my own account that even while viewing in my parent role, I am still able to download all the permission slips for the whole unit.

I’ll see if I can find an adult later this evening that can test this out for me. Would a treasurer or committee member normally have access to download the whole unit’s permission slips?

Follow-up question from your reply: So any registered adult would be able to download non-family members’ permission slips? Wouldn’t we want to restrict that to only pertinent roles?

And even for those leaders that should have access, wouldn’t we want to restrict it so Den Leaders only have access to their Den, for example?

@ChadCummings- i would test the permission slips with a non registered adult. A treasurer is a committee member who would have access to all accounts for the purpose of payment log access

Will do! Thanks!

My concern is that if any registered adult, (because registered adults are always at least on the committee), can download those prefilled permission slips, then as the Committee Chairperson, I’m going to have to train all my adults to not post those prefilled forms to our chat apps and such.

@ChadCummings yes - as a Note that is why my Units used a generic Annual Permission Slip

We use a “mega specific” permission slip. All know campouts and activities for the year are listed as dates. We use the same wording as the Scouting America slip, but just have all known dates. Then we only have to do permission slips for date changes. It ends up happening pretty rarely.

Oh, Interesting. I didn’t know we were allowed to use a generic annual permission slip. My training at Akela’s Council said that wasn’t allowed.

We just use Part A of the Annual Health and Medical Record (AHMR). We don’t have s separate permission slip.

Using a generic annual permission slip might not be allowed by your chartered organization or your local council. Please consult them.

That’s interesting as well, I was trained that the AHMR didn’t replace permission slips. I’m going to have to get ahold of my Council or District people to have a conversation about this.