Authentication and Authorization module

• Authentication
  • (local) database
  • OpenId?
  • LDAP
  • IP based
  • ...
• Authorization
  • Permissions
    • read
    • write (create, update, delete)
    • execute
  • Resources
    • tables
    • rows
    • columns
    • files
  • ...

Please put your requirements here.

Needs of the PhenoFlow module (lifelines, bbmri, gids2.0)

PhenoFlow is the user interface for searching, browsing and extracting phenotype data from the Pheno model.

The systems (that will be) using this module are

• LifeLines (datawarehouse)
• BBMRI-NL (biobank catalog) and
• gids (2.0).
• COL7A1 Phenotype/Patient? browser (here one gene == one investigation)
• XGAP data browser

Requirements:

• Users need to be able to login
• All registered users have edit permissions to create new investigations
• All existing investigations can only be listed (names) but no other values
• All investigations are owned by one or more persons
• If not yet owned, users can request to become manager of an investigation.
• Otherwise users can request read access to the investigation
• Users can create groups of themselves (except for lifelines)
• Users can share an investigation and all its components to [public, groups, whitelists of users) for viewing
• The sharing rules can be read or write (so that means they can transfer management of an investigation)
• All InvestigationElement? inherit the sharing rules set on an investigation (hence, if the investigation is public so are all its elements)
• Individual investigation elements, and the dataelements that refer to them can have different permissions (lifelines)

Issues:

• What about data that is not an Investigation/InvestigationElement??

See www.myexperiment.org for some inspiration on how this 'sharing' model can work.