Manage users permissions

[cmspinto]

To do the following action:

1. approve download of a restricted data;
2. resubmit a file;
3. delete file.

The platform keeps a list of users and permissions. It's using this list that the platform will know if the user has permission to do the action.

We need to clarify: a) Who as permission to maintain this list? b) Who can answer if a user request access to access/manage an institute

[neil-ices-dk]

1. approve download of a restricted data;

This is the data custodian

2. resubmit a file;

data custodian OR the login that was used to upload the original file

3. delete file.

data custodian OR the login that was used to upload the original file

4. Admin of above

JNCC (NT and NC), ICES (Carlos and Joana)

@cmspinto to implement