optimal permission handling for bulk upload tool

[matkoniecz]

What would be the best way to handle permissions for bulk upload tool (who can use it, who can confirm upload)

purpose of the tool is to academia to moderate bulk uploads

note that to upload data properly you need to be both relatively good at data analysis and processing to prepare dataset, you also need Colouring-specific knowledge to encode data correctly according to our data model.

each server would have own list of enabled accounts, and any such changes would apply per server - but code to do this would be shared

some available options for handling permissions:

1) enable mail verification of accounts, permit based on email format (say, permit people using .edu mails) - is it specific enough?

2) enable mail verification of accounts, permit anyone with verified email account

3) manual assignment of permissions via database query to specific accounts

4) admin panel where selected people would be able to permit/block specific accounts from using this feature (note: admins would need to be still assigned somehow, likely via database query in backed so it saves time if many people would be permitted on a given server).

5) permit anyone

[matkoniecz]

For start I would be tempted to go with "3. manual assignment of permissions via database query to specific accounts" but maybe spending some time on more friendly admin panel would make sense?

But then you still would need to assign people allowed to edit permission ranks of other people anyway...

[matkoniecz]

Comments and ideas welcome!