Current Work Flow
Dataset A has ACT Restriction. User B wants to download dataset A, he/she needs to email the ACT to request access to data set A. Via emails, an ACT member would ask the user to complete some forms. The forms are different for each dataset. Each request may request n number of users to access the data.
After the user meets all requirements given by the ACT (via emails), an ACT member would go to the dataset and manually enter the user(s) to give the user(s) access to the dataset.
A script is run (Brian Bot in mPower?) that gathers public information from the spreadsheet and publishes to a wiki: Principal Investigator, Institution, Date, and Intended Data Use Statement
Example form:
Link to instructions: https://www.synapse.org/#!Synapse:syn2954404
Disadvantages:
Manually entering the detailed information (in a spreadsheet) about the request for access (including approval status) is a burden for the ACT.
- User's handwriting is hard to read.
Proposed Work Flow
The ACT setup the necessary form for dataset A.
User B goes to dataset A and clicks on "show unmet conditions" to get to the data access request form. If they are not logged in, then they will be met with this view:
Once they log in, then they will have the option to "Request Access":
Upon clicking Request Access, the user will be shown a form to fill out, and upon submitting the form, an email will be set to notify the ACT.
User B can see the status of request on the dataset with the ability to cancel own request.
An ACT member could go to the dataset link provided in the email. There, they will use a new command only visible to the ACT to show the pending access requests table:
They will see a queryable table of access requests for the given dataset (since each will have it's own schema).
After querying for only requests that are awaiting approval/rejection:
Now the ACT member can view the user request and their submitted form before approving their request with a one click approval button. Approval may grant access to one user, or to many (ACT will decide based on request).
The data contributor wants to know who has access to their data. Sage has been given report about approved requests including the following information: Principal Investigator, Institution, Date, and Intended Data Use Statement.
Brian has a script that update this wiki: https://www.synapse.org/#!Synapse:syn4993293/wiki/392026
For auditing purposes, ACT member could query requests (find requests that need to be processed, find requests that have been approved and see when they were approved, etc). ACT member could export set of files (associated with the dataset requests) as zip file, to be sent to data contributor.