benwbrum / fromthepage

FromThePage is a wiki-like application for crowdsourcing transcription of handwritten documents.
http://fromthepage.com
GNU Affero General Public License v3.0
171 stars 51 forks source link

manage staff better #3298

Open saracarl opened 2 years ago

saracarl commented 2 years ago

We need better management of staff on organization accounts. Question from an opportunity:

How does management of the service itself work? Your documentation on Role Base Access seems to cover only collection privilege's and down. How is administration of the service performed - through a single administrative account, multiple, something else?

saracarl commented 2 years ago

My answer:

A single organizational account -- which can be an individual product owner or a service account -- can create collections (our word for thematic projects) and add additional accounts as staff members on those collections. Staff can do everything but delete the collection. Once someone has been added as a staff member they have the ability to create additional collections which show up under the main organizational account.

Issues to address: making staff without adding to a collection; removing staff when they leave.

saracarl commented 2 years ago

Maybe change "Add Owners" in the settings to "add staff"

saracarl commented 2 years ago

Show "staff" under your owner profile? And which collections they have access to?

benwbrum commented 2 years ago

See also #1411 if we address this.

saracarl commented 1 year ago

Both staff and reviewers should be managed at the owner account level (a dashboard?)

LVA specifically asked for this.

benwbrum commented 5 months ago

The one scenario in which this staff/org mapping may be a challenge is where one user should be able to receive activity email for one collection but not others. To do: review data to see how common this actually is.

bencomp commented 6 days ago

It turns out I did not understand the idea of staff accounts. It sounds like "staff" is a role within an organisation account, but in our installation my (admin) account is a staff account that is not strictly linked to another account. @benwbrum pointed to this issue because a private document set that I created in my own private collection suddenly had a completely different owner who has no relation with or access to my private collection. I traced that behaviour back to #2075, from which I learned that staff accounts are special.