Skip to main content
Req. Number
< All Topics
Print

Req 2.10: Enforce hierarchy-based policy inheritance where c...

📋 Requirement Details

Req 2.10: Enforce hierarchy-based policy inheritance where centrally defined restrictions cannot be modified by subordinate administrators.

⚙️ Technical Demonstration

IMTLazarus completely satisfies this requirement through a modular, object-oriented policy design engine. The platform allows DepEd administrators to create, combine, and automatically enforce dynamic configuration profiles. These profiles adapt instantly based on institutional variables, including the assigned Organizational Unit (OU), specified user roles (e.g., teachers, staff, or students), and multi-layered content compliance filters.

The dynamic structure functions through the following architectural characteristics:

  • Modular Filtering Blueprints: Rather than relying on rigid, one-size-fits-all policy templates, configurations are constructed by stacking independent sub-filters (such as Web Filters, YouTube Filters, and Apps Filters) as shown in the comprehensive overview interface (2.6-1.png).
  • Multi-Tenant Project Mapping: As detailed in 2.6-2.png, profiles can be mapped across variable project scopes (such as Domus, San Francisco, or IES Alberto). This ensures that policies scale dynamically to match DepEd's nested regional, division, and school-level organizational structures.
  • Granular Rule Enforcement Tiers: Within a single profile, administrators can precisely configure underlying filtering components:
    • Web Filtering & Search Compliance: Enforces category-specific blocks (e.g., blocking Porn, Dating, or Gamble) while keeping mandatory Google and YouTube SafeSearch features continuously Active (2.6-3.png).
    • Role-Based Content Tuning: Leverages role-based check boxes like Public for teachers / staff to dynamically loosen or tighten search criteria and keyword exception lists based on the authenticated user (2.6-4.png).
    • Educational Application Whitelisting: Features an intuitive application grid layer allowing administrators to dynamically toggle access to specific educational platforms (such as Google Classroom, Genially, and Formative) based on current class compliance baselines (2.6-5.jpg).

Profile Conditional Hierarchy Mapping

The configuration layers combine into a cohesive security matrix, allowing the system to determine real-time access rules:

Profile Asset ComponentActive Filtering VariableSystem Enforcement Target
Assigned Projects / OUsEnterprise Tenant Mapping (2.6-1.png)Restricts or applies policy scope to targeted geographic schools and divisions.
Web Filter ModuleCategory Blocks & SafeSearch (2.6-3.png)Controls internet access and strips explicit content from search engine results.
YouTube Filter ModuleIdentity Exception Matrices (2.6-4.png)Adjusts media viewing standards automatically based on student vs. teacher roles.
Apps Filter MatrixEducational App Grid Optimization (2.6-5.jpg)Approves or gray-scales interactive platforms within the classroom layout.

🖼️ Visual Evidence

Table of Contents