[Story] Sharing

[pmaier1]

Core Sharing Stories

ID	User Story	oC10	OCIS
CS0001	As a user I want to collaborate on any resource quickly & easily with anybody	Link shares	Links
CS0002	As a user I want to collaborate on my personal resources with single colleagues as easily as possible (short-term / ad-hoc collaboration)	User shares	User shares
CS0003	As a user I want to collaborate on my personal resources with a whole department/group/team at once without setting individual permissions (short-term / ad-hoc collaboration)	Group shares	Group shares (= Space which belongs to user's quota)
CS0004	As a user I usually collaborate on my personal resources with the same people and want to add them quickly with the same share properties to resources.	Group shares	Group shares (= Space which belongs to user's quota)
CS0005	As an organization we have users from different teams that need to collaborate on a project.	Group shares	Spaces shared with groups
CS0006	As a user I want to collaborate on my personal resources with single externals with additional security features (2FA, sign terms, etc.) and allowing them to use auxiliary features (comments, tags, etc.) in an auditable way	Guest shares	Share by mail + create user with role "Guest"
CS0007	As a user I want to collaborate on my personal resources with external ownCloud/OCM users	Federated user shares	Federated user shares
CS0008	As an owner I want to be able to control what collaborators are able to do with shared resources (file operations / collaborative editing modes, etc.)	Permissions + Advanced sharing permissions	Permissions + extensibility + Roles
CS0009	As a user I want to collaborate on projects whose members change over time (admin-controlled).	Group shares	- Group shares (= Space which belongs to user's quota) - Admin-provisioned spaces
CS0010	As a user I want to collaborate on projects whose members I change over time (user-controlled).	Custom Group shares	User-provisioned spaces
CS0011	As a collaborator I want to be able to give other users' resources or project resources an individual name for that I can remember what it is and easily find it again	Ability for collaborators to rename the parent share resource only for them	Ability for collaborators to rename the parent share resource only for them
CS0012	As a user I don't understand the different types of sharing resources and need some guidance.	?	?
CS0013	As a user I want to have a clear separation between my personal resources and other users' resources to prevent accidentally sharing resources with others.	Sharing indicators (OC 10 style...)	- Sharing indicators (Phoenix style) - Configuration to allow/disallow mounting of shares to personal space

Access Management Stories #

ID	User Story	oC10	OCIS
AM0001	As an owner I want to delegate the management of access rights for resources but want to allow the delegates to set permissions and other share properties themselves (in the scope of the original properties).	Reshare permission	Reshare permission
AM0002	As a collaborator of a resource I want to add other collaborators to give them access under the conditions I choose.	Reshare with user	Reshare with user
AM0003	As a collaborator of a resource I want to add many other collaborators at once to give them access under the conditions I choose.	Reshare with group	Reshare with group
AM0004	As a collaborator of a resource I want to collaborate on the resource quickly & easily with anybody.	Reshare by link	Reshare by link
AM0005	As an owner I want to delegate the management of access rights for resources (when the responsibilities for data are shared / when I'm away for some time)	Share with Custom Groups, access management via group roles	Spaces have a Co-Owner role for access management delegation.
AM0006	As an owner I want to see and manage all collaborators including reshares, so I know everyone who has access to the resource and can be careful what I put there.	Owner can see and manage all collaborators.	- Share owner can see and manage all collaborators - Space owner can see and manage all collaborators
AM0007	As a collaborator I want to see all other collaborators for that I know everyone who has access to the resource and can be careful what I put there.	- Collaborators can only see other collaborators they added (reshare) - Missing: Ability to see all collaborators	- Permission: See other collaborators - Co-Owner role for access management delegation
AM0008	As a collaborator I want to manage other collaborators for that I can add/remove other collaborators and change their permissions or other properties.	- Collaborators can only manage other collaborators they added (reshare) - Missing: Ability to manage all collaborators	- Permission: Manage other collaborators - Co-Owner role for access management delegation
AM0009	As a user I want to control the lifetime of collaborators / links for that I do not provide infinite access (as I might forget about it and might leak data).	Expiration date for user/group and link shares	- Expiration date for user/group and link shares - Expiration date for spaces? (rather not!)
AM0010	As a user / project lead I want to control what individual collaborators are allowed to do with my resources / with project resources	Individual share permissions	- Roles for user/group shares and links - Roles for spaces
AM0011	As a user I want to allow/disallow collaborators to be able to view/restore versions of a file as those might contain information I don't want a collaborator to know (e.g., in legal use cases)	not possible	Permission: Versions
AM0012	As a user I want to allow/disallow collaborators to be able to view/restore the shared trash bin as it might contain information I don't want a collaborator to know (e.g., in legal use cases)	not possible	Permission: Trash bin

Extended Sharing Stories

ID	User Story	oC10	OCIS
ES0001	As an organization we have projects which have a longer lifecycle than the individual members are part of the organization or project. Therefore the ownership of project data needs to be transferrable between users.	a) Service account with own quota shares project folder with project owner(s), they reshare with project members. Access management via service account. b) Service account with own quota shares project folder with custom group. Access management via custom group.	- Spaces are dedicated storages with an own quota. - Spaces have a Co-Owner role for access management delegation and ownership transfer.
ES0002	As a user I don't want that project resources consume my quota as the resources belong to the project, not to myself.	Service account with own quota shares project folder with users.	- Spaces are dedicated storages with an own quota.
ES0003	As a user I want to collaborate with multiple users (internal & external) on data.	- Users share with multiple people, group shares for internals - Users share with internals via custom groups + adds externals manually	- Spaces with multiple users.
ES0004	As a user who is a member of department X I want to share a project folder from our common department share with a specific user/customer	Reshare sub-resource with user / by link	Add users/links to space sub-resource.
ES0005	As a user who is a member of department X I want to share a project folder from our common department share with another department/team	Reshare sub-resource with group	Add groups to space sub-resource.
ES0006	As a user I want to collaborate on certain resources in a project with others who are not part of the overall project (e.g., involve an external partner for a certain aspect)	Group share + reshare of sub-resource	Space + add collaborators/links to sub-resource.
ES0007	As a user I want to collaborate with local users, guests and federated users at once (FR: Add federated users to custom groups)	Users share with a group / custom group but need to add guests and federated users manually	Users can add all kinds of collaborators to spaces
ES0008	As a user I want to be able to refer to shared resources by posting a static link (that never changes) on other media like email, chatrooms	Private links	Links with or without access permissions (if a user is a collaborator, links resolve like private links)
ES0009	As a project member I want to restore resources other project members have deleted.	Duplication in all user trash bins	Spaces have dedicated trash bins all collaborators can access.
ES0010	As a user I don't want that resources I get from others are directly available in my files and are synced (control over space usage, keep my account clean)	Pending shares, selective sync / VFS	Ability to mount/unmount shares to/from personal space, selective sync / VFS
ES0011	As a user I want to inspect and browse what has been shared with me before syncing it to my devices.	Pending shares (missing browsing)	Browsable spaces and shares without mounting
ES0012	As an organization I need to transfer data between users. When I do that myself (admin), I need the confirmation of the users for GDPR reasons. When authenticated users can do it themselves, it's a lot easier for me.	Admin-based transfer-ownership (cumbersome)	Co-Owner role for access management delegation and ownership transfer.
ES0013	As an organization I need to bill users and projects according to their space usage	No good solution, attempts with files_volatile	Clear separation between personal and project resources via spaces allows cost association
ES0014	As an admin of an educational organization I'm obliged to certain regulations. Users have different categories of data, e.g. personal and institutional. When users leave the organization I am obliged to provide or retain some category of these data.	No good solution - Ask users to move data to retain somewhere - Use transfer-ownership	Admin-provisioned spaces for each user
ES0015	As an admin I want to provide certain resources (e.g., administrative stuff or manuals) to users by default. Either all or selected users should find this information in their account.	- Share the resources to a "All users" group or department groups - Mount external storage for "All users" group or department groups	Admin-provisioned spaces for groups
ES0016	As an organization I want to manage department memberships and associated data provisioning via groups in AD	- LDAP groups => oC Groups - Group shares	- LDAP groups => oC groups - Group shares (= Space which belongs to the user's quota) - Add groups to spaces
ES0017	As an organization I need to have a process to transfer project/department data between users (when they leave the organization / when responsibilities change)	- Service accounts as owners for project folders - Transfer ownership including shares	- Spaces for projects - Co-Owner role for access management delegation and ownership transfer.
ES0018	As a user I want to organize the resources I have access to the way I want to have my own structure and for that I can easily find them again	- Ability to freely move accepted incoming shares in the user's personal hierarchy	- Ability to freely move accepted incoming shares in the user's personal hierarchy
ES0019	As a collaborator I want to be able to point other collaborators to resources by telling them the path as this is the easiest and most widely understood way to do it	- Only possible when user hierarchies are identical - Recommendation to use private links instead	- Spaces have identical hierarchies for all participants - Recommendation to use private links
ES0020	As an organization I don't want to require users to use the web interface making received shares available for sync as they usually only work with clients or directly via API / on the storage	- Disable Pending Shares	- Disable Pending Shares

Side Sharing Stories

ID	User Story	oC10	OCIS
SS0001	As an admin I don't want users to waste money on space (abusing spaces to save own quota)	not possible	- Permission to create spaces - Admin approval for space creation - Default quota for spaces?
SS0002	As a project manager I want my list of projects to be limited to the current active projects to avoid clutter and confusion	Move project folders into an archive folder inside a share. No way to archive shares directly in a semantically meaningful way.	Archiving spaces
SS0003	As an admin I want to be able to store spaces on different types of storage (cold/warm storage, HDD, SSD or Tape) to save money and to be able to control performance.	Possible but cumbersome with external storage mounts. ...

[madsi1m]

AARNet Tenant Portal Stories

ID	User Story
	As an Admin I want to create a Tenant and assign domains to them based on ldap group(s) and assign user(s) to be Tenant Admin for this Tenant. For example we might put all users from an institute in an ldap group and would like to have a Tenant for that.
	As an Admin I want to create a Tenant and assign domains to assign/edit a group drive quota purchased by the Tenant.
	As an Admin I want to create a Tenant and assign domains to enable/disable the ability of tenant admins within this Tenant to have the ability of impersonate.
	As an Admin I want to delete a Tenant
	As an Admin I want to see a list of Tenants
	As an Admin or as a Tenant Admin I want to see live statistics/graphs about users and groups on this tenant.
	As an Admin or as a Tenant Admin I want to download CSV of statistics (total users, storage used, user information)
	As an Admin or as a Tenant Admin I want to have access to a prometheus endpoint for this Tenant
	As an Admin or as a Tenant Admin I want to I want to view a searchable list of users in this tenant, with the ability to impersonate the user in the tenant
	As an Admin or as a Tenant Admin I want to be able to add/delete/edit "Collaborator User" (users external to the system who have accounts in this tenant). When adding a "Collaborator User" a confirmation/invitation email must be sent to the new user who then accepts it. On accepting the user is added as a local account and is part of this Tenant.
	As an Admin or as a Tenant Admin I want to be able to add/delete/edit "Group Drives" with the ability to customize name, quota, "Group Drive Admin" and "Group Drive Users".
	As an Admin, Tenant Admin or as a Group Drive Admin, I want to be able to add/delete "Group Drive Users" from a Group Drive
	As an Admin or as a Tenant Admin I want to be able to import Group Drives Creation from a spreadsheet
	As an Admin or as a Tenant Admin I want to be able to view "Audit Logs" for this Tenant on all Tenant Portal activity.
	As an Admin or as a Tenant Admin I want to be able to suspend user accounts so the user can not login or access files. Shares from this user must also be suspended.
	As a specified email list, I want to be notified by email when a Tenant is near quota limits and when a Tenant has exceeded quota limits. This email list must be customizable by Admins