Advanced: Access Control

This guide explains modern access-control patterns for ChoreOps v0.5.x+, including Kiosk Mode for shared devices.

---

✅ Recommended Approach: Kiosk Mode (Primary)

If your assignees use a shared tablet (for example, a wall-mounted dashboard), the easiest setup is Kiosk Mode.

What it does

When enabled, Kiosk Mode allows specific assignee-facing dashboard actions without requiring the logged-in HA user to match the assignee’s linked ha_user_id.

• ✅ Assignee chore claim button can be used from shared dashboard sessions
• ✅ Assignee reward redeem/request button can be used from shared dashboard sessions
• ✅ Assignee chore disapprove can act as undo from an anonymous kiosk session when the chore is currently claimed
• ❌ Assignee reward disapprove still requires assignee identity match (or approver authorization path)
• ❌ Approve/disapprove authorization for approver/admin actions is unchanged
• ❌ Service-level authorization is unchanged

Where to enable it

• Open Options Flow → General Options
• Enable "Enable Kiosk Mode for Assignee Claims"

Security considerations

• Anyone with access to that shared device can submit assignee claims
• If sibling buttons are visible, sibling claims (and chore-undo presses) are possible
• Keep approver/admin dashboards and services separated from shared assignee devices

---

🔁 Alternative Approach: Shared Assignee User (Secondary)

If you prefer not to use Kiosk Mode, you can still use the older shared-account pattern.

How it works

• Create one HA account used by assignees on the shared device
• Link that account in user configuration where needed

Trade-offs

• Works for basic claim flows
• Can be harder to manage cleanly for multi-user households
• Also increases risk of sibling claims when all buttons are visible

---

🚦 Approval rules

Regardless of Kiosk Mode:

• ✅ Approver/Admin users can approve and disapprove chores/rewards
• ⚠️ Assignees can disapprove their own claimed items as undo
• ⚠️ With Kiosk Mode enabled, anonymous chore disapprove can trigger assignee undo for that button target
• ❌ Assignees cannot approve their own or sibling items

---

🧩 Suggested Setup Patterns

Single shared wall tablet (recommended):

• Use Kiosk Mode
• Restrict dashboard to assignee claim/redeem/undo cards only
• Keep approver/admin cards on approver-only dashboards/devices

Mixed personal devices + one family tablet:

• Keep normal user-linking for personal devices
• Enable Kiosk Mode for convenience on the family tablet
• Preserve approver-only access for approvals/services

---

🔍 Quick Comparison

Approach	Setup effort	Shared-device usability	Security control
Kiosk Mode	Low	High	Medium (device trust required)
Shared User	Medium	Medium	Medium (account visibility required)

---

Best Practices

• Use Kiosk Mode only on physically trusted devices
• Limit what shared dashboards can display and control
• Keep approver/service access on separate accounts and views
• Prefer unique user accounts when practical

For legacy behavior notes, see Frequently asked questions (FAQ).