Projectroles Basics

The basic concepts and functionalities of the projectroles app are detailed in this document.

Projects

The projectroles app groups project-specific data, user access roles and other features into projects and categories. These can be nested in a tree structure with the category type working as a container for sub-projects with no project content of its own.

User Roles in Projects

User access to projects is granted by per-project assigning of roles. In each project, a user can have one role at a time. New types of roles can be defined by extending the default model’s database table.

The default setup of role types used in SODAR sites:

  • Project Owner

    • Full read/write access to project data and roles

    • Can create sub-projects under owned categories

    • One per project

    • Must be specified upon project creation

  • Project Delegate

    • Full read/write access to project data

    • Can modify roles except for owner and delegate

    • One per project (by default, the limit can be increased in site settings)

    • Assigned by owner

  • Project Contributor

    • Can read and write project data

    • Can modify and delete own data

  • Project Guest

    • Read only access to project data

Note

Django superuser status overrides project role access.

The projectroles app provides the following features for managing user roles in projects:

  • Adding/modifying/removing site users as project members

  • Inviting people not yet using the site by email

  • Automated emailing of users regarding role changes

  • Mirroring user roles to/from an external projectroles-enabled site

Note

Currently, only superusers can assign owner roles for top-level categories.

Remote Project Sync

SODAR Core allows optionally reading and synchronizing project metadata between multiple SODAR-based Django sites. A superuser is able to set desired levels of remote access for specific sites on a per-project basis.

A SODAR site can have one of three modes: source, target or peer mode. A SODAR site can be set by the user in either source or target mode.

  • Source site is one expecting to (potentially) serve project metadata to an arbitrary number of other SODAR sites.

  • Target site can be linked with exactly one source site, from which it can retrieve project metadata. Creation of local projects can be enabled or disabled according to local configuration.

  • Peer mode is used only if two or more Target sites link to the same Source site. If synchronizing a project which has multiple accessing Target sites, metadata about those other Target sites is included and stored in Peer mode site objects.

Among the data which can be synchronized:

  • General project information such as title, description and readme

  • Project category structure

  • User roles in projects

  • User accounts for LDAP/AD users (required for the previous step)

  • Information of other Target Sites linking a common project

Rule System

Projectroles uses the django-rules package to manage permissions for accessing data, apps and functionalities within projects based on the user role. Predicates for project roles are provided by the projectroles app and can be used and extended for developing rules for your other project-specific Django apps.

App Plugins

Projectroles provides a plugin framework to enable integrating apps and content dynamically to a projectroles-enabled Django site. Types of apps and corresponding app plugins currently included:

  • Project apps: Apps related to specific projects, making use of project access control and providing data and content within the project’s scope

  • Site apps: Site-wide Django apps which are not project-specific

  • Backend apps: Backend apps without a GUI entry point, imported and used dynamically by other SODAR-based apps for e.g. connectivity to external resources.

App plugins are not limited to one per Django app. A single Django app in SODAR Core may contain one or more of the aforementioned plugin types, depending on the required functionality.

Existing apps can be modified to conform to the plugin structure by implementing certain variables, functions, views and templates within the app. For more details, see the app development documents.

Other Features

Other features in the projectroles app:

  • App settings: Setting values for project or user specific variables, which can be defined in project and site app plugins

  • Project starring: Ability for users to star projects as their favourites

  • Project search: Functionality for searching data within projects using functions implemented in project app plugins

  • Tour help: Inline help for pages

  • Project readme: README document for each project with Markdown support

  • Custom user model: Additions to the standard Django user model

  • Multi-domain LDAP/AD support: Support for LDAP/AD users from multiple domains

  • SODAR Taskflow and Timeline integration: Included but disabled unless backend apps for Taskflow and Timeline are integrated in the Django site

Templates and Styles

Projectoles provides views and templates for all GUI-related functionalities described above. The templates utilize the plugin framework to provide content under projects dynamically. The project also provides default CSS stylings, base templates and a base layout which can be used or adapted as needed. See the usage and app development documentation for more details.