open-plan-tool / gui

Energy Planning Application
Other
8 stars 4 forks source link

Project sharing rights need to be checked for fonctionnality and security #184

Open Bachibouzouk opened 1 year ago

Bachibouzouk commented 1 year ago

Currently the rights are edit and read but maybe we need more rights and/or define well what we mean the user with sharing rights can and cannot do

FredericHirschmueller commented 1 year ago

I think it would be great to have three sharing options:

read: the user who received the shared project can only read the project, without the possibility to edit any parameters.

edit: the user who received the shared project can edit everything in the project. The user who shared the project does not see the changes of the other user in his account.

collaborate: the user who received the shared project can edit everything in the project. The changes that are made within the project applies to the project of both users. That means that all the changes that are made by one user will also change the project of the other user. A little warning should be provided when sharing the project through "collaboration".

Bachibouzouk commented 1 year ago

@FredericHirschmueller - With read can the user duplicate or export the project or not at all? Technically the user could anyway write down the parameters down and reset the energy system on their own account (maybe for the timeseries it would be difficult...)

FredericHirschmueller commented 1 year ago

I would suggest that it's also not possible to duplicate or export the project. This would make it more save to share a project without the risk of sharing it with too many people. Even though it's still possible to write down the parameters and reset the energy system.