Disallow users from manually changing hidden values in form and submitting to take actions they shouldn't be able to, e.g., changing email address for participants that are not enrolled in the study or are not in the correct DAG
Manage
Each page checks role
Each function checks that combination of project, user, participant, and DAT is appropriate (e.g., even if participant is enrolled in study and user has appropriate role, don't allow user to take action on participant if they are in the wrong DAG)
Currently it is only logged in the project in which that change was made.
As this can have potential implications for authentication, it should be noted in all logs
Should this be achieved by sending separate logs to every project the participant is enrolled in? Pros:
* No changes needed in the way the logs page works in the projects
* Easy to implement Cons:
* Multiple logs in the system logging page
Or for the project to be able to "listen" for email-change events in its logs. Pros:
* No changes needed in the logging code itself Cons:
* Seems prone to bugs and fragility... When I enroll a participant into my project, do I suddenly see all previous email changes for that participant? Or should the date of enrollment into the project be consulted? What if they are disenrolled and then re-enrolled? If I disenroll a participant, do I stop seeing email-change logs that have already happened?
I don't like this page depending on a VSCode plugin to recreate...
Instead, link directly to a markdown file on Github and let Github handle rendering to html
Create simple markdown doc
Brief intro
How to use
What it is like for participants
On home tab, link directly to Github page for that doc