Authenticated access to GLAMR

[akiledal]

Primary motivation:

• Supporting the Great Lakes Center for Fresh Waters and Human Health (NSF / NIH OHH grant)

  • Data generated by the center
    • New data types:
    • Metabolomics
      • Targeted–will result in tables with concentrations of molecules per sample (earlier interest in this)
      • Untargeted
    • Environmental metadata not linked to omics samples
    • Existing data types:
    • Metagenomic, metatranscriptomic, amplicon
    • And access to existing GLAMR data

• Collaborator inquired about making password-protected amplicon data available to a subset of users prior to eventual public release

Implementation mechanism:

@robert102: Django has authentication / privileges built-in, so should be able to set up on the main GLAMR site (as opposed to running a second instance of the website that displays different information, protected globally by a password)

[robert102]

TODO list

• [x] user accounts, user groups, password authentication, admin interface
• [x] login page, logout link, password change
• [x] password reset, manual via account setup mechanism
• [x] access to internal pages require staff login
• [x] control access on major pages (for datasets, samples)
• [x] control access via taxonomy / abundance / other
• [x] control access via search
• [ ] control access to download files (requires separate globus shares)
• [x] complete user account page
• [ ] move login form into dropdown menu
• [x] set dataset restrictions at import
• [x] let users delete account
• [x] new account setup via special URL

Put on hold:

• [ ] user-initiated password reset (requires sending out emails)
• [ ] send out welcome email