Re: [Refdb-users] RefDB and privacy

[Torsten B. <br...@ph...>]

Hallöchen!

Markus Hoenicka writes:

> Zitat von Torsten Bronger <br...@ph...>:
>
>> This reminds me that I wanted to ask about the privacy policy in
>> RefDB.  From my tests it seems that I can see all <libinfo>
>> datasets of all other users.  Is this correct, or how can I
>> change this?
>
> I think this is correct. The idea was to make the location of
> other copies of an article available if you don't have a copy of
> your own. I have no idea whether this works in a real-world
> setting. I was also under the impression that there would be no
> demand to hide offprints from co-workers, so in contrast to
> extended notes (which can be kept private) links are supposed to
> be public.

But it is not only <link>, it is also <notes>.  Is <notes> realised
with extended notes?

> Would you prefer to treat link as private data, maybe optionally?

Actually I like liberal settings.  Especially because I think RefDB
is used in rather small groups < 100 people without anonymity where
excessive permission management is not vitally important.

Refbase plans to add fine-grained permission control, but I think
this is overkill.  It would be nice however if RefDB's log facility
enabled the admin to detect vandalism.

In Django-RefDB, I will install only one permission, namely the
permission to edit entries other than yours.  Django-RefDB keeps
track who created an entry, and you can always edit your entries,
but not those of others, unless you have that permission.

Tschö,
Torsten.

-- 
Torsten Bronger, aquisgrana, europa vetus
                   Jabber ID: tor...@ja...