Advanced: Access Control

🔐 Advanced: Access Control

This guide explains modern access-control patterns for KidsChores v0.5.x+, including the new Kiosk Mode option for shared devices.

---

✅ Recommended Approach: Kiosk Mode (Primary)

If your kids use a shared tablet (for example, a wall-mounted dashboard), the easiest modern setup is Kiosk Mode.

What it does

When enabled, Kiosk Mode allows kid-facing dashboard buttons to work without requiring the logged-in HA user to match the kid’s linked ha_user_id.

• ✅ Kid chore claim button can be used from shared dashboard sessions
• ✅ Kid reward redeem/request button can be used from shared dashboard sessions
• ❌ Does not allow approvals/disapprovals by kids (except kid undo behavior)
• ❌ Does not bypass service-level authorization

Where to enable it

• Open Options Flow → General Options
• Enable "Enable Kiosk Mode for Kid Claims"

Security considerations

• Anyone with access to that shared device can submit kid claims
• If sibling buttons are visible, sibling claims are possible
• Keep parent/admin-only dashboards and services separated from shared kid devices

---

🔁 Alternative Approach: Shared Kid User (Secondary)

If you prefer not to use Kiosk Mode, you can still use the older shared-account pattern.

How it works

• Create one HA account used by kids on the shared device
• Link that account in kid configuration where needed

Trade-offs

• Works for basic claim flows
• Can be harder to manage cleanly for multi-kid households
• Also increases risk of sibling claims when all buttons are visible

---

🚦 Approval Rules (Unchanged)

Regardless of Kiosk Mode:

• ✅ Parent/Admin users can approve and disapprove chores/rewards
• ⚠️ Kids can disapprove their own claimed items as undo
• ❌ Kids cannot approve their own or sibling items

---

🧩 Suggested Setup Patterns

Single shared wall tablet (recommended):

• Use Kiosk Mode
• Restrict dashboard to kid claim/redeem cards only
• Keep parent approval cards on parent-only dashboards/devices

Mixed personal devices + one family tablet:

• Keep normal kid-user linking for personal devices
• Enable Kiosk Mode for convenience on the family tablet
• Preserve parent-only access for approvals/services

---

🔍 Quick Comparison

Approach	Setup effort	Shared-device usability	Security control
Kiosk Mode	Low	High	Medium (device trust required)
Shared Kid User	Medium	Medium	Medium (account visibility required)

---

Best Practices

• Use Kiosk Mode only on physically trusted family devices
• Limit what shared dashboards can display and control
• Keep parent/service access on separate accounts and views
• Prefer unique kid accounts when practical

For legacy behavior notes, see Access Control: Overview & Best Practices.