Re: RefDB and privacy

Hallöchen!

Markus Hoenicka writes:

> Zitat von Torsten Bronger <[email protected]>:
>
>> This reminds me that I wanted to ask about the privacy policy in
>> RefDB.  From my tests it seems that I can see all <libinfo>
>> datasets of all other users.  Is this correct, or how can I
>> change this?
>
> I think this is correct. The idea was to make the location of
> other copies of an article available if you don't have a copy of
> your own. I have no idea whether this works in a real-world
> setting. I was also under the impression that there would be no
> demand to hide offprints from co-workers, so in contrast to
> extended notes (which can be kept private) links are supposed to
> be public.

But it is not only <link>, it is also <notes>.  Is <notes> realised
with extended notes?

> Would you prefer to treat link as private data, maybe optionally?

Actually I like liberal settings.  Especially because I think RefDB
is used in rather small groups < 100 people without anonymity where
excessive permission management is not vitally important.

Refbase plans to add fine-grained permission control, but I think
this is overkill.  It would be nice however if RefDB's log facility
enabled the admin to detect vandalism.

In Django-RefDB, I will install only one permission, namely the
permission to edit entries other than yours.  Django-RefDB keeps
track who created an entry, and you can always edit your entries,
but not those of others, unless you have that permission.

Tschö,
Torsten.

-- 
Torsten Bronger, aquisgrana, europa vetus
                   Jabber ID: [email protected]


------------------------------------------------------------------------------
Stay on top of everything new and different, both inside and 
around Java (TM) technology - register by April 22, and save
$200 on the JavaOne (SM) conference, June 2-5, 2009, San Francisco.
300 plus technical and hands-on sessions. Register today. 
Use priority code J9JMT32. http://p.sf.net/sfu/p