3 ms·
"After some digging, it was easy to find the HTTP request that pulled this information from the server. And it even had all the birthdates in the JSON!" HR nee
by dsr_ 5y ago
"After some digging, it was easy to find the HTTP request that pulled this information from the server. And it even had all the birthdates in the JSON!"
HR needs to know this, but it shouldn't be available to random employees.
- devenvdev 5y agoWhy though? We use hibob, and anyone can find anyone's full name and birthday via UI anyway. Are there any compliance issues with this?
- dsr_ 5y agoDo you live in a place where there are anti-discrimination laws concerning employee ages? If not, perhaps there is no issue for you.
- actually_a_dog 5y agoAnybody who can effectively discriminate against an employee based on age probably has access to that info directly via some HR system anyway.
- toomuchtodo 5y agoIt’s PII and should be restricted to only those who require the data for their job (HR).