EPrints Technical Mailing List Archive

Message: #08705

< Previous (by date) | Next (by date) > | < Previous (in thread) | Next (in thread) > | Messages - Most Recent First | Threads - Most Recent First

Re: [EP-tech] Temporary user privilege

Hi Martin,

There is no facility to give temporary permission to edit an item, it fact there is not way to allow the user to edit a particular eprint record and no others, especially so if the item is already live.  I would be worried how you would ensure oversight of these records that users got temporary permission to edit.  As if the item was already live a malicious user could do quite a bit of damage.

A not fully thought out solution might be to have a form that allows a user to submit a specific item change request.  This change could then simply be approved by an editor/admin that would then cause the eprint record to be updated.  As your use case is just for a single field, it is probably easiest to build a plugin that focusses on just that field and allows you to only submit additive changes for it.  This would require its own "eprint change request" data object, to send to editors/admins for approval, a bit like the current review queue.

Thinking about this more generically, having an eprint change request form that can be used by registered users to submit a change request to add/remove/modify any field on any item may be quite useful, particularly to reduce editor/admin workload.  However, although not a massive project, it would take a fair amount of time to code.  One particular difficultly would be how to model modifying a single entry in a multiple field.  I think some of the better aspects of batch edit user interface could be taken to help facilitate this.

Regards

David Newman

On 17/08/2021 14:59, Martin Braendle via Eprints-tech wrote:
CAUTION: This e-mail originated outside the University of Southampton.

Hi,

is it possible to give a submitter a temporary privilege to edit an item owned by another user? Any security objections? The privilege would be set and removed via a plugin. Or is it a silly question, because giving a temporary privilege would already require a admin privilege?

Background: During import via Crossref or PubMed, we check for duplicates in the archive and issue a warning, when the item is already available. Currently, the submitter has then the option to send a mail to the repo editors to ask to add his institute to the record. In order to reduce editors' workload, we would like that that the submitter can add the his/her institute to the item (owned by different submitter) via a button.

Or should we think the other way 'round: Assign ownership of the item temporarily to the current submitter?

Kind regards,

Martin


--
Dr. Martin Brändle
Zentrale Informatik
Universität Zürich
Stampfenbachstr. 73
CH-8006 Zürich


*** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
*** Archive: http://www.eprints.org/tech.php/
*** EPrints community wiki: http://wiki.eprints.org/


AVG logo

This email has been checked for viruses by AVG antivirus software.
www.avg.com