Do we want PIs to see other PIs XDMoD data?

[joachimweyl]

• XDMoD shows one set of data if you don't log in
• It shows another set if you do login
• and it filters that set if you are logged in as an XDMoD PI (independent of what you are on Keycloak, for now)
• If we don't care about PIs seeing each others usage data then we don't need to figure out a whole login setup for PI's
  • they would not have access to Exports and saving reports if they don't have any login
  • if they all share one login they will be able to delete each others saved reports and templates
• If we do not want PIs to see each others data then we do care about logins

[joachimweyl]

@waygil & @syokel what are your thoughts?

[syockel]

This is fine in my opinion. If we have complaints about it, we can change this later.

[joachimweyl]

@syockel This would also mean that either all users would use the same XDMoD Login or they would only have access to the Summary, Usage, & About tabs in XDMoD. Do you have a preference?

[larsks]

@joachimweyl I haven't been following this discussion but the phrase "all users would use the same xdmod login" makes me nervous.

[joachimweyl]

@larsks me as well, that is why I wanted to confirm with @syockel that, that was what he had in mind.

[syockel]

Normally there is a non-auth view of xdmod that provide the basics of users, projects, ... stats for the services. Login is required to build custom reports and save them and have them sent out via email on some regular interval. So I guess the question is do we want the basic usage to be public (no auth) or do we want everyone to have a login? Are we able to leverage the xdmod SSO? https://open.xdmod.org/10.0/simpleSAMLphp.html