Comment 1 for bug 513421

At this point we have a rather sophisticated security model that gives administration a fine point control of who can see what intervention data. However, both current deployments are not interested in using that fine a control, so they both have to put every teacher in the admin group. It seems sloppy to require such user action.

I would suggest that we create an access setting that allows the administration to specify that teachers can see all intervetnion data. Then both of our instances would be able to keep teachers in the teachers group.