Access Rules for COMET Data

We have implemented a generic role-based access control for COMET Data that applies to a specific set of administrative roles and aligns with our COMET authorization practices. In short, this strategy ensures controlled access to data, aligned with the organization and the roles of the active user profile. 

Access rules are processed and validated in the following order:

1. User must be an authorized user of Comet with one or more authorized roles. If the user is already logged in, COMET Data uses the same user profile in the same browser (i.e., single sign-on).

2. Based on the roles, the user is authorized for each reporting group. For example, a user with a Player Administrator role is authorized to open Persons and Organizations reports, a user with a Competition Administrator role is authorized to open Organizations and Competitions reports, a user with a Club Licensing Administrator role is authorized to open Organizations and Licensing reports, etc.

3. Based on the roles and the organization of the active user profile, the execution of each report is authorized, depending on the selected parameters. For example, a user from a regional association who is an Administrator of Players can run all reports in the Persons section ONLY if the input parameters are set appropriately. More specifically, the Organization must be equal to or below its own organization, and the Registration category must be set to Player. Therefore, access to each individual report within a group is conditional, specific to the parameters selected.

To illustrate better, here is a more visual representation of the text above:

General Authorizations

Authorized roles are listed in the first column. Any other roles not listed here are NOT authorized to access COMET Data.

• Green color = this role is authorized to view/run the reports from this group, as long as the Organization selected is equal to his own organization or below in hierarchy.

• Red color = this role is NOT authorized to view or run the reports from this group.

Conditional Authorizations

Yellow color = this role is authorized to view/run the reports from this group WITH SPECIFIC CONDITIONS (i.e., there are mandatory parameters and mandatory values for those parameters), e.g:

• Club Condition - Club Referents/Admins can only run reports for their own Club (if their Club is set as a parameter

• Competition Condition - Competition Managers, Disciplinary Managers, Referee Managers/Appointers can only run reports for Competitions where they are allocated (if such Competition is set as a parameter)

• Registration Category - e.g., Reg Cat=Player - the Player Administrator can only run Persons reports if the Registration Category parameter has been set to Player. So the Player Administrator can see the Player data, but not the data for Coaches, Referees, etc.

• Club Type - e.g., ClubType=National Team - the Administrator of National Teams can only run Persons reports if the Club Type has been set to National Team. So the Administrator of National Teams can see only the data for Players, Coaches, and Officials of the National Team.

• Event Category - e.g., Event Cat=Seminar - the Administrator of National Teams can only run Events reports related to Seminars/Courses

Additional Notes

• Transfers and Transfer Details have distinct authorizations from other Persons reports, as specified in the Table above

• Competition Public Reports are those reports that do not contain any sensitive data and are generally available to broader audiences. Therefore, these reports can be executed by all COMET Data users and are not subject to hierarchy conditions; i.e., a user can access them for any organisation in the system. These reports are:

  • Competitions 

  • Competition Standings

  • Competition Teams

  • Matches 

  • Match Phases 

  • Match Events

• All other Competition Reports are Restricted, meaning they can be accessed by Competition, Referee, and Disciplinary Administrators (+ Managers/Appointers for their Competitions). The exception is Referee Assessor Marks, which can only be accessed by Referee Administrators (+Appointers for their Competition)

• Superusers and Data Superusers can access all reports under their hierarchy, without exception