Notification Emails: Role Management and Association of People with Organizations

[jeannekitchens]

Since there's not role management or association of users with an organization, it appears that all users receive all notifications.

We'll need to be able to add users with other organizations and they will need to receive the notifications only about their extractions. Whereas, Credential Engine needs all notifications to know what's happening and if there's success or failure.

Ultimately, this should be integrated with the existing Credential Registry account system that uses role management and associates users with organizations.

This isssue conflates the issues of role management and email notifications but wanted to get this conversation started.

[rsaksida]

Adding more detail to this issue @alexculealt can take a stab at it. This is my proposal:

DB changes

The goal is to support organizations, scoping data to organizations, and some basic notification management.

• Organizations

  • New organizations table to group users and their data
  • Each organization has basic info (name, etc.)
  • Organizations own catalogues and their associated data

• Users

  • Add new column is_staff (boolean) to identify system staff members
  • Add new column receive_all_notifications (boolean) for staff to opt into system-wide notifications

• Memberships

  • New memberships table linking users to organizations
  • Fields:
    • user_id (FK to users)
    • organization_id (FK to organizations)
    • role (enum: 'admin', 'editor')
    • receive_all_notifications (boolean) for org admins to receive all org notifications

• Catalogues

  • Add new fields organization_id, created_by

• Recipes

  • Add new field created_by

• Extractions

  • Add new field created_by

UI / scoping

• Some kind of org selector in the UI
• Views must be scoped to org
• Staff users can see all orgs
• Regular users can only see data from orgs they're associated with

User Management

• Organization admins can:
  • Add new users to their organization
  • Manage roles within their organization
  • Configure notification preferences for their organization
• Staff users can:
  • Access and manage all organizations
  • Configure system-wide notification preferences

Notifications

• Only send notifications to the user who created the configuration/extraction
• Also send it to org admins / staff who opted in