In order to offer the most opportunities for sharing, but still maintain our contract of privacy with the end users, we propose the following strategy:
- Thumbnails are no longer public. They will be visible or not dependent on the users rights over that item. This is only relevant in albums and slideshows.
- Users can create albums or slideshows of any content they have read access over without restriction.
- When the user goes to share the album/ss, the IME sets access on items that user has admin rights on; IME reports on any it could not set access on - reports that user will not be able to see it, OR that user will be able to see it because already has access to that item. In second case, we should note that we cannot guarantee it will stay accessible.
- IME will also create record in the item representing any item-level access right and the context in which it is relevant. It will use this record to manage these rights when adding/removing them. IME workflow:
1. For each item in the album/ss, check if admin over. If YES, set item-level right, and record album-right in item record.
2. If NO, query to see if the user being given privileges already has access to that item. Report on the failure, whether it will be visible or not. - Any items later added to the album should be also given all relevant item-level privileges where they can be, and the user should be notified if the item(s) cannot be shared.
- Any items that are removed, item-level access record should be removed, and item-level access should be removed if it is not present in some other context.
Short-term plan for Sprint 3:
- Rollback the thumbnail changes so that they are public again. Put changes back in when we can do the whole plan.
Use cases:
SAP & HST:
- Judy uploads files to a library. She creates an album, which she shares with Jamie, making Jamie an admin of the album. Jamie makes changes, and then is ready to let the publisher know that they are ready. Jamie then gives the publisher download rights to the album (which she can do because she is an admin over the album, and therefore all the items in it).
- OR, if Judy only gave Jamie WRITE access on the album, when Jamie goes to share it with the publisher, she will receive a message saying she cannot share the items in the album. Judy must give Jamie admin rights over the album (or over the content in her library) so Jamie can share it.
- This seems acceptable: everyone on the team needs to be an admin of the content. Once we have groups, this will be very easy to make work.
Stellar:
- Professor A gathers content from Rotch, and from Vue, and creates a slideshow. She then shares it with her students. Students WILL be able to see all the content, because Rotch and Vue content is public, even though she does not have admin rights over that content. QUESTION: how should we handle the messaging? don't want to alarm people unnecessarily.
- Professor B has a library, and gives Professor A read access. Professor A takes some content from Prof B's library, and adds it to her slideshow. She is notified that this content will NOT be visible to her students, and she must ask Professor B to make the content public if it is to be shareable. Professor B can either make Professor A an admin of his library, which he probably will not want to do, OR he can create an album of the items that Professor A wants, and give Professor A admin rights over the album. In this way, albums can be used to manage access on subsets of items.
PSB:
- User called "PSB-Seller" (or something like that) is admin over all content. All content is readable by public.
Public User creates an album, and drags images to it. They pay PSB and reference the album name (might need some kind of generic naming/number in albums). PSB should already be able to see all the albums. Maybe this means they go in as super-admin, maybe its some sort of PSB-specific customization. They then set 'download' on the album for that user, and the user can download the items. When PSB wants to restrict access, they remove download for that user. [Problem: if user created the album, download icon will be available. However, they wont actually get the items when the go to download them -- they'll get an error. This case works as it should, but might be a bit confusing.]
Public Domain:
- There was a big party, and 7 people each upload pictures to their personal libraries. All of their libraries are private. One of them creates an album, and gives all 7 people admin rights on that album. Then everyone can drag images to the album, and choose to share all the pictures with others.
- Alternatively, the creator of the album could just give others WRITE on the album. When they drag their content there, they are giving the owner of the album admin rights over their items. Only the owner of the album can share it with others. The owner of the album can successfully share the album with anyone he wants to, even though he does not own the content. This is because he is the admin of all content in the album -- the others gave him admin rights by dragging their items there.