Access Control: Overview & Best Practices

🔐 Access Control: Overview & Best Practices

The KidsChores Integration includes built-in access controls to ensure that only authorized users can claim chores, request rewards, or approve actions. These settings prevent accidental or unauthorized changes while allowing flexibility for different family setups.

---

🚦 How Access Control Works:

Permissions are based on Home Assistant user roles and the integration settings.

• 🟢 Claiming Chores & Requesting Rewards:
  ✅ Allowed for kids if their HA user is linked to them in the integration settings. ✅ Allowed for HA Admins and normal *Parent user accounts that are assigned to the kid. ❌ Blocked for users who are not associated with a kid.

• 🔵 Approving Chores & Rewards:
  ✅ Only parents and HA Admin can approve chore completions and reward redemptions.
  ❌ Kids cannot approve their own or their siblings’ chores if they are logged in with their own account.

---

🔑 User Roles & Permissions:

User Role	Claim Chores	Request Rewards	Approve Actions
Parent/Admin (HA Admin User)	✅ Yes	✅ Yes	✅ Yes
Kid (Linked in Integration)	✅ Yes	✅ Yes	❌ No
User Not Linked to a Kid	❌ No	❌ No	❌ No

---

❓ Common Use Cases & Solutions:

1️⃣ Standard Users Cannot Claim Chores
🔍 Issue: A user logs in but cannot tap buttons to claim chores.
✅ Solution: In Kids Settings, associate their HA user with the correct kid.

2️⃣ Kids Need to Use a Shared Device (Kiosk Mode)
🔍 Issue: Kids don’t have individual devices, and a shared user account is needed.
✅ Solution:

• Create a universal “kid” user in HA and assign it to multiple kids.
• This allows kids to claim chores & request rewards but not approve actions.
• Caution - This is a workaround as it will allow kids to have access to their sibling's chore and reward claim buttons.

3️⃣ Preventing Kids from Approving Tasks
🔍 Concern: A kid might approve their own or siblings’ chores.
✅ Built-in Protection:

• Approval functions require admin access and cannot be overridden by regular users.

---

🔍 Best Practices for Secure Access Control:

✔️ Assign unique HA users for each kid if possible.
✔️ Parents should login with their own non-admin user account that is set as a parent in the integration. ✔️ Use a shared kiosk user for common family devices only if necessary.

By following these guidelines, you can ensure that kids can interact with their chores, while only authorized users can approve completions and rewards. 🚀😊