Add field-level API security control for Student Health Problems (STU.HP)
STU.HP is returned by the Aeries API v5 Student GET endpoints with no way to restrict vendor access. Add a "Student Health Notes (STU.HP)" option to Third-Party Authorization security areas so districts can explicitly grant or revoke vendor access, and withhold the field by default until granted.
3
votes
AdminDianaM
(Admin, Aeries Software)
shared this idea
Hello, this work item has been completed and was released on 8/4/26. Here are the relevant revision notes:
Security > API Security:
- Student Health Problem (STU.HP) is now withheld from the Students API endpoint (v5) unless a third-party vendor has been explicitly granted access to health data. Vendors without this authorization no longer receive this field, reducing the risk of sensitive health information being shared without the district's consent. All other student data returned by the endpoint is unaffected
- Third-Party Authorization credentials now include a Student Health Notes (STU.HP) option, letting administrators grant or revoke a vendor's access to classroom health and allergy notes directly from the standard security setup screen.
