...
- Rollback the thumbnail changes so that they are public again. Put changes back in when we can do the whole plan.
Tasks Required to Implement the Plan:
- Updating data on production server:
- Qing needs to write a script to make thumbnail have access rights on production server
- To update production server data on albums and slideshows, we can manually go in as super admin, remove privileges, and add them back in, let the system do the updating.
- Qing must implement the contextual access rights tracking
- Front end must implement the messaging
- Need to implement ownable service, for system to be able to control full access rights.
- Areas to explore what needs to be done:
- dragging items to albums/slideshows -- any messaging required? what needs to happen on the backend?
Use cases:
SAP & HST:
- Judy uploads files to a library. She creates an album, which she shares with Jamie, making Jamie an admin of the album. Jamie makes changes, and then is ready to let the publisher know that they are ready. Jamie then gives the publisher download rights to the album (which she can do because she is an admin over the album, and therefore all the items in it).
- OR, if Judy only gave Jamie WRITE access on the album, when Jamie goes to share it with the publisher, she will receive a message saying she cannot share the items in the album. Judy must give Jamie admin rights over the album (or over the content in her library) so Jamie can share it.
- This seems acceptable: everyone on the team needs to be an admin of the content. Once we have groups, this will be very easy to make work.
...
- There was a big party, and 7 people each upload pictures to their personal libraries. All of their libraries are private. One of them creates an album, and gives all 7 people admin rights on that album. Then everyone can drag images to the album, and choose to share all the pictures with others.
- Alternatively, the creator of the album could just give others WRITE on the album. When they drag their content there, they are giving the owner of the album admin rights over their items. Only the owner of the album can share it with others. The owner of the album can successfully share the album with anyone he wants to, even though he does not own the content. This is because he is the admin of all content in the album -- the others gave him admin rights by dragging their items there.
Need to lock down suspected bad content:
- Need to implement ownable service in backend, so we can remove the owner's permissions over that content while its being researched.
- 2 cases: content is found out to be truly illegal, and there could be legal proceedings; OR content is found to be acceptable, all previous rights should be reinstated.