Public explainer
Simple, secure coordination for the Grade 4 teacher appreciation video.
This public mini site explains how SIS Cairo West can collect short student-made contributions, protect family privacy, and route approved stakeholders into a restricted workflow portal without mixing private actions into the public homepage.
Six-step delivery workflow
Who does what
- School admin: roster authority, consent oversight, audit visibility, and final school sign-off.
- Producer coordinator: manages the review queue and prepares approved material for editing.
- Parent / guardian: updates consent and uploads student-safe contributions for linked children.
- Student: participates inside adult-managed limits and only sees approved items linked to their profile.
Built-in safeguards
- Password hashing with scrypt and constant-time verification.
- Secure session cookies, CSRF tokens, role checks, and rate limiting.
- Restricted file serving; private data never sits in the public webroot.
- Append-only audit events with hash chaining for tamper evidence.
- Consent-aware review flow that blocks public visibility without explicit guardian approval.