Please help us help you and fill where relevant:
Your LimeSurvey version: 6.3
Own server or LimeSurvey hosting: Own
Survey theme/template: Own
==================
Hello everyone,

I am currently working on a Limesurvey project on the topic of evaluations. However, for privacy reasons, we need to make sure that certain users (the creators or initiators of surveys) can start surveys, but should not have direct access to the individual responses. Our aim is to protect the confidentiality of participants' responses. 

Is anyone here dealing with a similar requirement? I'm looking for advice or examples of how to effectively implement such access restrictions. If you have an idea for a solution, I'd love to hear about it.

Thank you in advance for your help!
 

This question (or a very, very similar question) has been answered in the last couple of weeks. Have a search in the forum.

Thanks for the quick reply.
I've spent a lot of time searching the forum over the last few days, but I haven't found any idea how someone can design and launch a poll without having access to the answers. What would be the keyword I could search for, if you remember? Maybe I'm just overlooking it.

I think the user wanted to delete responses from Limesurvey and only send them via email to a specific contact.

From there the discussion went deeper in different directions, if I remember right.

Create a plugin using beforeHasPermission event : always send false for all response permission.

But a question :  make a questionnaire if no one can access the answers.

no, different background. in itself, a plugin would be great where I don't set the answers and statistics to load when answers are available, but when the user is superadmin (or similar). In the case of evaluations, not research, it is important for data protection reasons that the user can design and initiate the evaluation, but cannot view the individual responses.

Micha_Malina wrote:

no, different background. in itself, a plugin would be great where I don't set the answers and statistics to load when answers are available, but when the user is superadmin (or similar).
 

Then a plugin seems the best solution, not too complex here : just send false for responses and statictics

not to complex sounds good. I might start thinking about it again. Just looking for the fitting position in the code, for example, will probably take

not to complex sounds good.

Handle this with care.

If Denis says "not too complex" I would assume that it is fairly complex for "normal" people. Denis is not "normal" as in he is one of the most experienced developers of Limesurvey plugins, just as background info.

 I know him and his work (would buy a fan shirt). And I guess having him write the plugin is cheaper than paying me to find the solution myself

The idea  :

Create a plugin just for beforeHasPermission
1. register to beforeHasPermission with beforeGlobalPermission
2. in beforeGlobalPermission : unregister to beforeHasPermission (or check DB directly)
3. If true : set havePermission static variable to true
4. register to beforeHasPermission with beforeSurveyGroupPermission  and beforeFinalObjectPermission
5. in beforeSurveyGroupPermission : unregister to beforeHasPermission (or check DB directly)
6. If true : set havePermission static variable to true
7. register to beforeHasPermission with beforeObjectPermission
8. in beforeObjectPermission : check if it's survey and reponse or statitics
9. If yes : return false
10. If  not : return true if havePermission static variable is true
11. return value if havePermission static variable is not true

Maybe we can avoid the double test on beforeSurveyGroupPermission, because both can return false for response and statitics.