This idea has been developed and deployed to Canvas

For more information, please read through the  Canvas Release Notes (2021-06-19).

---

With the June 19th update, all persons with an account-level role by default have the ability to view and edit all item banks within the system.

Our institution needs a permission be added to control this ability instead of it being available by default, such as the "question bank view and list" permission.

My suggestion is 1 permission for "Item Banks Access" with two options:

1 - view access to all item banks in the system

2 - edit access to all item banks in the system

 

Benefits:

This would ensure that only the proper persons have the ability to view and edit item banks.

Risk mitigation: Our institution, like others, has non-admin persons using account-level roles which makes it a risk to have full item bank access given to those persons.