Feature #16817

Configuration option to grant users read access to "All users" group by default

Added by Peter Amstutz about 1 year ago. Updated 12 days ago.

Status:
New
Priority:
Normal
Assigned To:
-
Category:
API
Target version:
Start date:
Due date:
% Done:

0%

Estimated time:
Story points:
-

Description

Currently, a user is considered "set up" if there is a permission link "user" -> can_read -> "All users"

This means things shared with "All users" can be seen by everyone in the "All users" group.

However, there is a problems with this:

We don't create the link going the other way: "All users" -> can_read -> user. You have to "opt in" users to be visible to "All users". This is confusing.

There is no UI enabling users to opt in (or opt out) of being visible to "All users" nor is it documented. There is also no other UI that would allow users to connect to one another (see #17814) or easily create/manage role groups for mutual visibility (#16946).

For this ticket:

Proposed solution: a configuration option that "opts in" users to the "All users" group by default when the user account is set up. Consider making this the default on new installs, because this is almost always what people actually want.

Follow up with additional tickets that make the multi-tenant case work better: a user should be able to create a group and then invite other users to the group so that they are mutually visible without being being required to be visible to the entire instance.


Related issues

Related to Arvados - Feature #17814: Send "invite" or "friend request" to connect with other usersNew

Related to Arvados Epics - Story #16946: WB2 user/group management featuresNew08/01/202110/31/2021

History

#1 Updated by Peter Amstutz about 1 year ago

  • Target version changed from 2020-10-07 Sprint to 2020-10-21 Sprint

#2 Updated by Peter Amstutz 12 months ago

  • Target version changed from 2020-10-21 Sprint to 2020-11-04 Sprint

#3 Updated by Peter Amstutz 11 months ago

  • Target version changed from 2020-11-04 Sprint to 2020-11-18

#4 Updated by Peter Amstutz 11 months ago

  • Target version changed from 2020-11-18 to 2020-12-02 Sprint

#5 Updated by Peter Amstutz 10 months ago

  • Target version changed from 2020-12-02 Sprint to 2020-12-16 Sprint

#6 Updated by Peter Amstutz 10 months ago

  • Category set to API

#7 Updated by Peter Amstutz 10 months ago

  • Target version changed from 2020-12-16 Sprint to 2021-01-06 Sprint

#8 Updated by Peter Amstutz 10 months ago

  • Target version changed from 2021-01-06 Sprint to 2021-01-20 Sprint

#9 Updated by Peter Amstutz 9 months ago

  • Target version changed from 2021-01-20 Sprint to 2021-02-03 Sprint

#10 Updated by Peter Amstutz 8 months ago

  • Target version deleted (2021-02-03 Sprint)

#11 Updated by Peter Amstutz about 2 months ago

  • Subject changed from Configuration option to grant users read or write access to "All users" group by default to Configuration option to grant users read access to "All users" group by default

#12 Updated by Peter Amstutz about 2 months ago

  • Target version set to 2021-09-01 sprint

#13 Updated by Peter Amstutz about 2 months ago

  • Related to Feature #17814: Send "invite" or "friend request" to connect with other users added

#15 Updated by Peter Amstutz about 2 months ago

  • Related to Story #16946: WB2 user/group management features added

#16 Updated by Peter Amstutz about 2 months ago

  • Description updated (diff)

#17 Updated by Peter Amstutz about 2 months ago

  • Target version changed from 2021-09-01 sprint to 2021-09-15 sprint

#18 Updated by Peter Amstutz 26 days ago

  • Target version changed from 2021-09-15 sprint to 2021-09-29 sprint

#19 Updated by Peter Amstutz 12 days ago

  • Target version changed from 2021-09-29 sprint to 2021-10-13 sprint

Also available in: Atom PDF