search

galaxyproject / galaxy

Data intensive science for everyone.
https://galaxyproject.org
Other
1.39k stars 999 forks source link

Rework the sharing system of Galaxy objects #4602

Open martenson opened 7 years ago

martenson commented 7 years ago

Cannot set "read" access permission on a folder, must set individually on files within that folder.

Cannot share datasets with individual users. I must have a "sharing role" available (I could create these once by sharing a history with a user, but no more?), or by have a normal role available.

Cannot share LDAs with multiple roles.

"User has to have all these roles in order to access this dataset. Users without access permission cannot have other permissions on this dataset. If there are no access roles set on the dataset it is considered unrestricted." Is absolutely useless to me.

Be an admin. Modify: Role B, Access: Role A, Manage: Role B. Save. All modified roles disappear except for "Access"

This is just a random list of sharing issues within datalibraries from here

The underlying issue that causes these confusions and inabilities is not in the data libraries but in our sharing framework as a whole. Creating a 'sharing role' for every single account that you want to share with simply does not cut it anymore.

We need to achieve google-drive like user experience for sharing datasets/histories/workflows/library folders - and that is a big project.

I would like to start a discussion on that here.

hexylena commented 7 years ago

Yes, absolutely @ sharing experience. As a user, I want to be able to share anything (history, dataset, workflow, library (top level), library folders, files within a library folder) with groups and users. It should be as simple as auto-completing their name/email (assuming expose_user_name/mail is true)

martenson commented 7 years ago

We have also discussed with @natefoo that we could put user-driven groups in place, that would allow users to self-organize better.

hexylena commented 7 years ago

YES!!

bernt-matthias commented 6 years ago

Cannot set "read" access permission on a folder, must set individually on files within that folder.

:+1:

hexylena commented 6 years ago

Turning this into a meta issue, some other persistent permission pain points:

Workflows

Data library issues (but I guess these are tangential)