Permissions for country sites

[JesseCCSI]

As more country sites start adding annotations to contracts, we'll need to address the issue of permissions. For the OLC DRC site, we would like to set up the following process:

• DRC local staff can upload contracts and associated documents, add metadata, and publish contracts with metadata;
• DRC local staff can also add annotations, but they cannot publish annotations;
• CCSI staff are notified when a new contract has been added, and when new annotations have been added;
• CCSI staff review the annotations, and have permission to publish annotations;
• (CCSI staff would also have all other permissions that DRC local staff have)

Different approaches to permissions will be adopted for different country sites (i.e. they will be decided on a site-by-site basis), and permissions will need to be amended over time (e.g. as local annotators receive training).

Logging here as suggested by @anjesh and @charlesyoung so we can discuss and work on a solution. Thanks.

cc @KaitlinCCSI @SamCCSI

[anderspeders]

Currently there is one default hierachy for permissions across RC country sites and the main platform. Country sites do not offer custom selection of the permission structure as we seek to limit maintenance costs.

If OLC wish to develop specific permission cases for specific OLC country site please have in mind that this will be at cost directly to the OLC project. Also please note that as a general principle the more specific / bespoke country sites are developed the bigger are the risks that bugs and errors will appear at a later stage.

[KaitlinCCSI]

Actually, as @JesseCCSI and @charlesyoung discussed previously, this type of set-up seems to be relevant for both RC and OLC, even if OLC would be first to use. I suggest adding to agenda of Jan tech discussion.

[charlesyoung]

@anjesh can we discuss this before you spend time working on this ticket.

[anjesh]

sure.

[manishgs]

Currently, system have predefined Role and Permissions, To leverage user's permissions, we can add functionality to add new Role so that admin can create different role having different permissions.

Add Role
Admin (user having right to create user/role) can create user's role with pre-defined permissions.

Following are the permissions which user can select while creating a new role.

• Add Contract
• Edit Contract
• Delete Contract
• Complete metadata
• Reject metadata
• Edit text
• Complete text
• Publish text
• Reject text
• Publish metadata
• Add Contract
• Edit Annotation
• Delete Annotation
• Complete annotation
• Reject annotation
• Publish annotation
• Unpublish Metadata
• Unpublish Text
• Unpublish Annotation
• Send to MTURK
• Send to RC
• MTURK Review
• MTURK View
• Add User
• View User
• Update User
• Delete User

Please let us know If we need to add other permissions which are not included in the list.

Role page
User can add/update/delete role.

New role can be created from user form.

@JesseCCSI @SamCCSI @charlesyoung
Let us know your comment and suggestions.

[charlesyoung]

Thanks @manishgs. How long will it take to develop?

[JesseCCSI]

Thanks @manishgs looks good. Will it be possible to create country-specific roles/ permissions?

[manishgs]

@charlesyoung
It will take 30-40 hrs for development and testing.

@JesseCCSI
There will be country dropdown (which is optional field) in user form, if country selected then user will have country-specific roles/permissions.

[charlesyoung]

@manishgs we definitely don't have the budget to develop this so please hold all work on this ticket.

@JesseCCSI lets arrange a time to chat.

[charlesyoung]

To be discussed during the next group tech call.

Removing from S19.