Access Control: Overview & Best Practices

🔐 Access Control: Overview & Best Practices

The KidsChores Integration includes built-in access controls to ensure that only authorized users can claim chores, request rewards, or approve actions. These settings prevent accidental or unauthorized changes while allowing flexibility for different family setups.

---

🚦 How Access Control Works:

Permissions are based on Home Assistant user roles and the integration settings.

• 🟢 Claiming Chores & Requesting Rewards: ✅ Allowed for kids if their HA user is linked to them in the integration settings. ✅ Allowed for HA Admins and normal Parent user accounts that are assigned to the kid. ❌ Blocked for users who are not associated with a kid.

• 🔵 Approving & Disapproving Chores & Rewards: ✅ Only parents and HA Admin can approve and disapprove chore completions and reward redemptions (counts toward disapproval stats). ⚠️ Kids can disapprove their own claimed items as an undo button if they accidentally claim something—this does NOT count in disapproval statistics. ❌ Kids cannot approve their own or their siblings’ chores if they are logged in with their own account.

---

🔑 User Roles & Permissions:

User Role	Claim Chores	Request Rewards	Approve Actions	Disapprove Actions
Parent/Admin (HA Admin User)	✅ Yes	✅ Yes	✅ Yes	✅ Yes (counts in stats)
Kid (Linked in Integration)	✅ Yes	✅ Yes	❌ No	⚠️ Undo only (no stats)
User Not Linked to a Kid	❌ No	❌ No	❌ No	❌ No

---

❓ Common Use Cases & Solutions:

1️⃣ Standard Users Cannot Claim Chores 🔍 Issue: A user logs in but cannot tap buttons to claim chores. ✅ Solution: In Kids Settings, associate their HA user with the correct kid.

2️⃣ Kids Need to Use a Shared Device (Shared Kid User) 🔍 Issue: Kids don’t have individual devices, and a shared user account is needed. ✅ Solution:

• Create a universal “kid” user in HA and assign it to multiple kids.
• This allows kids to claim chores & request rewards but not approve actions.
• Caution: this workaround allows kids to access sibling chore and reward claim buttons.

3️⃣ Preventing Kids from Approving Tasks 🔍 Concern: A kid might approve their own or siblings’ chores. ✅ Built-in Protection:

• Approval functions require admin/parent access and cannot be overridden by regular users.
• Kids can only disapprove their own items (to undo accidental claims), which doesn't affect disapproval statistics.

4️⃣ Kids Want to Undo an Accidental Claim 🔍 Issue: A child accidentally claimed a chore or reward and wants to cancel it. ✅ Solution:

• Kids can tap the disapprove button on their own claimed item to undo it instantly.
• This action does not count in disapproval statistics (parent/admin disapprovals do count).
• Great for preventing frustration over accidental button taps.

---

🔍 Best Practices for Secure Access Control:

✔️ Assign unique HA users for each kid if possible. ✔️ Parents should login with their own non-admin user account that is set as a parent in the integration. ✔️ Use a shared kid user for common family devices only if necessary.

By following these guidelines, you can ensure that kids can interact with their chores, while only authorized users can approve completions and rewards. 🚀😊