User type: Archivist
The purpose of access policies is to establish who may access the information contained in the PIAs of a given collection, documentary series or a specific PIA and under what circumstances or limitations. Access policies are administered by the archivist, and always depend on the collection the archivist is working with. The policy will apply to the packages belonging to that collection.
A policy allows you to indicate:
- Policy description:
- Name
- Description
- Access restriction criteria
- Legal Framework
- Data sensitivity LOPD
- Policy enforcement level:
- Documentary series (list of registered series)
- PIA identifier
- Access type:
- Public (all groups see packages)
- Restricted to metadata only, or metadata and binaries (groups must be specified)
- User group to which it applies when access is restricted
The action controlled by the access policy is always query (or download), and is always set at the package level. Within the package, access can be granted to the entire package, or only to the metadata. Restrictions cannot be made at the level of a specific binary or vocabulary within the package.
The result of the policy is always to allow . By default, internal users do not have access to packages, and with the policy, explicit access to packages is given.
High politics
To register a policy, the archivist must click the “Add new policy” button.
And fill out a form like this:
With this policy, the archivist (who is working with an entity and a collection) applies an access policy to the packages of this entity and collection. In a first step, he specifies the scope of application of the policy: either a documentary series or a specific package identifier. Then he specifies the type of access (public or restricted), and if it is restricted, he can indicate for each user group whether access is only to metadata or also to binaries.
Once registered, the policy is automatically applied and remains in effect until deleted.
If an access policy already exists with the same documentary series or PIA that is being created, the platform will notify you of this fact and will not create the new policy.
The list of groups on the previous screen always contains all groups in the fund. If new groups are added, they appear without permissions.
Policy modification
Policy modification allows you to modify all the data in an access policy, except the documentary series and/or the package identifier.
The query or modification screen is the same as the policy registration screen, but with the fields filled in.
Policy removal
To delete a policy, simply select the policy to delete and click on “delete policy”
