Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...




green = works as expected and agreed uponred = does NOT work as expected and agreed uponyellow = unsure
Consensus vs.
Needs Confirmaton

Behavior

Access Role


Works now for Collections

Expected to work
based on description for Collections

Works now for
Admin Sets
Expected to work
based on description for
Admin Sets

Comments
Impacting collections/adminsets

edit_access in solr_doc to collection/adminsetmanagerYESmanager can modify collection metadata

YES

manager can edit the set metadata, participants, and release and visibility settings


depositorNO
NO



viewerNO
NO


read_access in solr doc to collection/adminsetmanagerNO
NO

Should depositors have read access?
depositorNOdepositor can view the collectionNO
For collections, I believe depositor SHOULD be given read_access.
For admin_sets. I believe depositor SHOULD NOT be given read_access.  Or perhaps make it optional.
Rationale - You wouldn't want the default_admin_set to grant read_access to all depositors b/c that may include all logged in users which holds all works.


viewerYES
NO


access to collection/adminset indexmanagerYES
YES



depositorNOdepositor can view the collectionNO



viewerNO
NO


create collection/adminsetmanagerSORT OF
YES
For collections, who can create collections of a particular type is limited to collection type managers and creators.


depositorNO
NO



viewerNO
NO


delete collection/adminsetmanagerYESmanager delete the collectionYES



depositorNO
NO



viewerNO
NO


access to collection/adminset show pagemanagerYES

YES


via :edit access to the collection


depositorNOdepositor can view the collectionNO
PROPOSED change to YES-- via :read access to the collection


viewerNO
NO


PROPOSED change to YES -- via :read access to the collection

access to collection/adminset edit pagemanagerYESmanager can modify collection metadataYESmanager can edit the set metadata, participants, and release and visibility settings


depositorNO
NO



viewerNO
NO


add works to collection/adminsetmanagerYESmanager can add to and remove works from the collectionYES



depositorYESdepositor can add works to to the collectionYESdepositor can add new works to this administrative set


viewerNO
NO


remove works from collection/adminsetmanagerYES, IFmanager can add to and remove works from the collection

NO
(based on if)


YES IF requires_membership? false

NO IF requires_membership? true

NOTE: Admin sets has requires_membership == true

Minimally, manager has to be a manager/depositor to both collections



depositor?
?
Minimally, manager has to be a manager/depositor to both collections


viewerNO
NO


move works between collection/adminsetmanagerYESmanager can add to and remove works from the collectionYES

YES when moving between collections of the same type

YES when moving between different collection types IF requires_membership? false

Minimally, manager has to be a manager/depositor to both collections



depositor?
?
Minimally, depositor has to be a manager/depositor to both collections


viewerNO
NO

Consensus vs.
Needs Confirmaton

Behavior

Access Role


Works now for Collections

Expected to work
based on description for Collections

Works now for
Admin Sets
Expected to work
based on description for
Admin Sets

Comments
Impacting works

edit_access in solr_doc to new worksmanagerYESmanager can edit work metadataYESmanager can edit work metadataApplied at create time when a work is created in just one collection.  Admin set participants are applied every time a work is created.  Collection and admin set permissions are additive.


depositorNO
NO



viewerNO
NO


read_access in solr doc to collection/adminsetmanagerNO
NO



depositorNOdepositor can view the collectionNO



viewerYESviewer can view it even if the visibility permissions of the collection otherwise would not permit them to view itYESviewer can view works in the set regardless of the visibility settings applied to the workApplied at create time when a work is created in just one collection.  Admin set participants are applied every time a work is created.  Collection and admin set permissions are additive.

All other access to works is based on the edit and read access grants and is controlled by the standard abilities process.


For Admin Sets:

permission_
template_
access
admin set solr docability: can? create_in_adminsetcan access through UI via Dashboard → Administrative Setswork solr doccomments
Definition on participants tab:

Managers of this administrative set can

  •  edit the set metadata, participants, and release and visibility settings (via Dashboard → Administrative Sets)
  •  edit work metadata (controlled by manager having edit_access on work)
  •  add to or remove files from a work (controlled by manager having edit_access on work)
  •  add new works to the set

NOTE: Manager is granted access to works and their files only FOR WORKS CREATED AFTER USER BECAME MANAGER

Additional things a manager can do not specifically mentioned in the definition

  •  move works to another set where user is manager
  •  move works to another set where user is depositor
  •  

    view the admin set through Dashboard → Administrative Sets

  •  delete empty admin set (NOT in the definition, but you can do this with edit_access)


Any differences from Collections? (checked if same)

  •  edit the collection metadata, sharing, discovery, etc.
  •  edit work metadata (works created directly in collection)
  •  add to or remove files from a work
  •  add new works to the collection


  •  move works to another collection where user is manager
  •  move works to another collection where user is depositor
  •  remove works from collection (not allowed for admin sets)
  •  delete empty collection
  •  delete collection with works (not allowed for admin sets)
:manage

edit_access

trueYESedit_accessAdmin user creating the admin set is not given edit_access as a user until a manager is added.  This does not have much of an impact as the user is part of the admin group and gets access through that group.

Depositors of this administrative set can

  •  can add new works to this administrative set.
:depositN/AtrueNO
Access to works are granted only for works the user creates.

Viewers of this administrative set can

  •  view works in the set regardless of the visibility settings applied to the work. For example, viewers can view works in this set even if the works are currently embargoed or restricted.

Additional functionality expected not directly mentioned in the definition

  •  view the admin set through Dashboard → Administrative Sets  (NOT in the definition, but QA expected to be able to do this)
:viewN/AfalseNOread_accessThe user is NOT given read access to the admin set and therefore cannot view the admin set through the UI.

...