View Categories

OPS06: Living-Person Privacy

< 1 min read

Every public page applies a living-person rule that fails closed: when the plugin cannot be sure a record is safe to show, it does not show it.

What is never shown #

  • Records marked Private.
  • Records whose event date - or, if there is none, record date - falls inside the cutoff window. The cutoff defaults to 100 years and is set on the Study screen.
  • Records linked to a person who is flagged as living in the shared data core, whatever the record's date - a living centenarian's census entry stays hidden.
  • Records linked to a person who cannot be found.
  • Records with no readable date and no person link.

Applied in the query, not just on display #

The rule is applied inside the database query that every public view uses, so the occurrence count, the pagination, the record-type counts, the surname index, the study page's record inventory and the household inventory all count exactly the records a visitor can open. A suppressed person cannot appear as the head of a household or as a surname in the index.

Administrators see everything #

The admin screens show every record. Only the public pages are filtered.