Different types of authorization for client, core, admins
amschaal opened this issue · comments
Currently all logged in users have access to all submissions, types, settings. The goal is to have clients log in to see their submissions. To do that, they need to have different levels of access.
Potential levels of access:
Client
- Access to submissions in which they are PI or submitter
- Potentially allow contacts read only access?
Core
- Admin: everything
- Submission types: manage submission types
- Submissions: view, edit submissions
Institution
- Admin: Add/Remove cores
- Manage: Assign core managers, admins