Add temporary / one-shot user to manage a report

[larrykind]

Proposal

This proposal is about the creation of temporary / one-shot users that will be able to access a specific report with restricted rights, as for example read-only, share-only. The tenant admin or user that can create this kind of users will set the duration of the access and the rights of the temporary user. Thank you for considering it.

Motivation and context

The goal is the possibility to temporarily share with "externals" expert counsultants the access to a single report. The consultant can upload documents and comments about a report using the globaleaks security features, instead of sharing in a less-secure way.

[evilaliv3]

Thank you @larrykind

This is definitely an interesting feature probably already discussed in some other tickets over the time. It is not easy to be iplemented but lets see.

I would decouple from the analysis the specific permission to give because you say that you want the access to be read only but maybe depending on the the user could support some duties.

It is interesting to make the access expire (i'm not sure if with a deadline or with the report or when manually removed by other normal recipients)

For being able to create a user and at the same exact time grant access to them we need escrow keys to be enabled into the system.

An other topic to discuss is if these users should be able to access only this report or since the creation of the user they should become possible to add them to other reports as well. This could serve other use cases and simplify use but in this case.

Lets see what other members of the community think.

[larrykind]

just want to introduce some simplification to the feature, hoping to accomplish your observations @evilaliv3. These "one-shot" users in my opinion should be involved in a "per-report" way, cause they are intended as temporary.

These kind of users should not interact with the whistleblower, but just with other receivers: in this case they could also read other reports.

[danielvaknine]

Not heavily invested in this but we see the point.

A suggestion to try and simplify it as might as possible could be the possibility to "grant access" to a user this way by simply adding an email, which would create a "one-shot" account for this specific report for this email/user.

However we also see both the technical difficulties and difficulties in making it super user-friendly to actually use