[EP-tech] Temporary user privilege

David R Newman drn at ecs.soton.ac.uk
Tue Aug 17 15:31:37 BST 2021


Hi Martin,

There is no facility to give temporary permission to edit an item, it 
fact there is not way to allow the user to edit a particular eprint 
record and no others, especially so if the item is already live.  I 
would be worried how you would ensure oversight of these records that 
users got temporary permission to edit.  As if the item was already live 
a malicious user could do quite a bit of damage.

A not fully thought out solution might be to have a form that allows a 
user to submit a specific item change request.  This change could then 
simply be approved by an editor/admin that would then cause the eprint 
record to be updated.  As your use case is just for a single field, it 
is probably easiest to build a plugin that focusses on just that field 
and allows you to only submit additive changes for it.  This would 
require its own "eprint change request" data object, to send to 
editors/admins for approval, a bit like the current review queue.

Thinking about this more generically, having an eprint change request 
form that can be used by registered users to submit a change request to 
add/remove/modify any field on any item may be quite useful, 
particularly to reduce editor/admin workload. However, although not a 
massive project, it would take a fair amount of time to code.  One 
particular difficultly would be how to model modifying a single entry in 
a multiple field.  I think some of the better aspects of batch edit user 
interface could be taken to help facilitate this.

Regards

David Newman

On 17/08/2021 14:59, Martin Braendle via Eprints-tech wrote:
> *CAUTION:* This e-mail originated outside the University of Southampton.
>
> Hi,
>
> is it possible to give a submitter a temporary privilege to edit an 
> item owned by another user? Any security objections? The privilege 
> would be set and removed via a plugin. Or is it a silly question, 
> because giving a temporary privilege would already require a admin 
> privilege?
>
> Background: During import via Crossref or PubMed, we check for 
> duplicates in the archive and issue a warning, when the item is 
> already available. Currently, the submitter has then the option to 
> send a mail to the repo editors to ask to add his institute to the 
> record. In order to reduce editors' workload, we would like that that 
> the submitter can add the his/her institute to the item (owned by 
> different submitter) via a button.
>
> Or should we think the other way 'round: Assign ownership of the item 
> temporarily to the current submitter?
>
> Kind regards,
>
> Martin
>
>
> --
> Dr. Martin Brändle
> Zentrale Informatik
> Universität Zürich
> Stampfenbachstr. 73
> CH-8006 Zürich
>
>
> *** Options: http://mailman.ecs.soton.ac.uk/mailman/listinfo/eprints-tech
> *** Archive: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.eprints.org%2Ftech.php%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C688e3cb20f2242e932cf08d9618bb993%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637648074997138806%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=PWFfxyt%2Fwi5cqmrRP%2B9naN4%2F%2F4qlhTgJE5nV9KPcHzk%3D&reserved=0
> *** EPrints community wiki: https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwiki.eprints.org%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C688e3cb20f2242e932cf08d9618bb993%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637648074997148774%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=HJ9yH%2BDkshzBt4auhbAWCsGCjjiN19JDPN%2B3oet2Ex8%3D&reserved=0


-- 
This email has been checked for viruses by AVG.
https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.avg.com%2F&data=04%7C01%7Ceprints-tech%40ecs.soton.ac.uk%7C688e3cb20f2242e932cf08d9618bb993%7C4a5378f929f44d3ebe89669d03ada9d8%7C0%7C0%7C637648074997148774%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=FkQMYehO3QE%2FGuv7ngCHRc6JpU61Cw92NN6c0CuiznI%3D&reserved=0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ecs.soton.ac.uk/pipermail/eprints-tech/attachments/20210817/9bc4c289/attachment-0001.html 


More information about the Eprints-tech mailing list