Build out roles & privileges

[aclark02-arcus]

We received a somewhat urgent request to share clinsight with some non-employees: medical monitors from other regions outside of North America. As a result, we need to start leveraging roles & privileges in a significant way so we can pair down the application for these users.

Specifically, restricting data accessible in ClinSight by:

• Region (OR sites)
  • Example: Just sites in the Japan region OR a collection of site numbers.
  • Feasibility: Seems like this would be easy to do since we already have that functionality in the Settings modal. We'd just have to move it to the metadata.xlsx file. Maybe we create a new tab called roles which contains a column for role, and a column for viable sites / regions?
• Certain forms
  • Example: just forms related to eligibility, plus some log line pages like Con Meds, Prior Meds, etc.
  • Feasibility: This doesn't really exist yet, without having two metadata.xlsx files & two app deployments of course. Doesn't seem like it would be too tricky tackle. This info could be added form_level_data tab, but I'd argue keeping everything in the newly proposed roles tab would be preferred.
• No summary graphics
  • Example: our internal ClinSight has a waterfall plot & spider plot for the efficacy / disease assessment tab.
  • Feasibility: very easy to implement.

[aclark02-arcus]

Any initial thoughts on this one @LDSamson?

[LDSamson]

Hi Aaron,

Thanks for the detailed description. Here are some quick initial thoughts

How would this work together with the roles that already exist? Would you envision this to be some sort of sub roles? Note that some privilege settings for the data manager and medical monitor role already exist in the config file.

What information will be provided from outside the app? All privileges? Or are the privileges right to the role? Note that the current role will be written in the database when reviewing/querying.

With Shinyproxy i think we can only add one role/ group variable but I can check again.

Of note is that the role specific site selection is available but only when using shiny manager