Fine grained (Institution level) permissions for BVP

davidbairdala commented 10 years ago

migrated from: https://code.google.com/p/ala/issues/detail?id=696 date: Thu Jun 12 17:26:10 2014 author: david.ba...@gmail.com

With the creation of the Institution domain object, we should provide a new tier of permissions that allow institutions greater autonomy over managing their expeditions, whilst protecting other expeditions from accidental modification/deletion.

New (BVP application managed) roles 'Institution_Admin' and 'Institution_Validator' need to be created, which are always linked with an institution id. It is conceivable that some users will have multiple Institution_Admin and Institution_Validator roles, each with a different institution id.

Institution_Admins can:

Create new expeditions that are implicitly linked to the institution. If a user has more than one "Institution_Admin" role, a list of institutions should be provided. Perhaps always show a drop down of institutions - with either one or many institutions?
Assign institution_admin role for their institution to other users (again the list of institutions is constrained by their own roles)
Assign "Institution_Validator" roles to users
Modify institution profile details (description, logos, contact details etc)
Manage institution picklist items (collection codes?)
Manage institution templates. All templates will be readonly by default, but can be cloned and attached to an institution.

Consider putting all permission checks in a service so that the rules can be easily codified:

BVP_ADMIN can do anything
Institution_Admin can do anything to institution expeditions
Institution_Validator can validate any expedition of that institution
Existing project_validator roles still need to be honoured
BVP_USER can transcribe only

davidbairdala commented 10 years ago

date: Thu Jun 12 17:26:18 2014 author: david.ba...@gmail.com

(No comment was entered for this change.)

UPDATES: Labels: -Type-Defect Type-Enhancement

pbrenton commented 6 years ago

Related issue #11

cdausmus commented 3 years ago

Closing as duplicate of #11

AtlasOfLivingAustralia / volunteer-portal

Fine grained (Institution level) permissions for BVP #31