Ideas for migrating deactivated users from DVN 3.x to Dataverse 4

[Ben Companjen]

Hi all,

In our DVN 3.6 installation we deactivated a couple of users who left their institution and should no longer have access to the dataverses and studies they created/updated.

When we migrate to Dataverse 4, we would like to keep the history intact and migrate the deactivated accounts too. At the same time we want to prevent the accounts from becoming active again, but as far as I know it's not possible to deactivate accounts in Dataverse 4. See https://github.com/IQSS/dataverse/issues/2419.

I guess it's "safe" to remove deactivated accounts that have not contributed to or created dataverses or studies. Right?

What should we do with other deactivated accounts, that did create or contribute to dataverses or studies? Remove the password?

How do other institutions handle this?

Regards,

Ben

[Condon, Kevin M]

From: gdu...@g.harvard.edu <gdu...@g.harvard.edu> on behalf of Durand, Gustavo <gdu...@iq.harvard.edu>
Sent: Wednesday, May 11, 2016 11:35 AM

1. Yes, sort of. It's not just delete, but also interact, e.g. download, as we do keep track of who downloaded something.

2. You have to keep them. In our case, I think we realized that there wasn't much use to deactivating accounts as those people could create new accounts. What they could do is remove all role assignments from those accounts.

On Wed, May 11, 2016 at 11:32 AM, Condon, Kevin M <kco...@hmdc.harvard.edu> wrote:

This is the user migration question from Ben.

1. OK to delete/or migrate deactivated users that have not created anything?

2. What do you do with deactivated users who have created things? They want to preserve the history.

[Ben Companjen]

Hi Kevin, Gustavo,

 

I hadn't thanked you yet for the suggestions. Thanks!

 

A comment from Phil on GitHub [1] suggests that disabling user accounts may come back as part of the Sensitive Data project. Is that correct?

 

[1]: https://github.com/IQSS/dataverse/issues/2419#issuecomment-222987880

 

Regards,

 

Ben

[Condon, Kevin M]

We're looking at aspects of account management relevant to Harvard security requirements. Revoking access or disabling users who no longer have a business need to access sensitive data may be addressed in this way.

I think Phil summarized it well in the ticket:

I don't have an authoritative answer for you but I'm in the process of gathering security-related issues under my name to help figure out the scope of work for the Support for Sensitive Data project. Please sit tight while we figure this out.

---

From: dataverse-m...@googlegroups.com <dataverse-m...@googlegroups.com> on behalf of Ben Companjen <ben.co...@dans.knaw.nl>
Sent: Friday, June 3, 2016 7:16:31 AM
To: dataverse-m...@googlegroups.com

Subject: Re: Ideas for migrating deactivated users from DVN 3.x to Dataverse 4

Hi Kevin, Gustavo,

 

I hadn't thanked you yet for the suggestions. Thanks!

 

A comment from Phil on GitHub [1] suggests that disabling user accounts may come back as part of the Sensitive Data project. Is that correct?

 

[1]: https://github.com/IQSS/dataverse/issues/2419#issuecomment-222987880

 

Regards,

 

Ben

 

From: Kevin Condon <kco...@hmdc.harvard.edu>
Date: woensdag 11 mei 2016 17:51
To: Ben Companjen <ben.co...@dans.knaw.nl>, "dataverse-m...@googlegroups.com" <dataverse-m...@googlegroups.com>
Subject: Re: Ideas for migrating deactivated users from DVN 3.x to Dataverse 4

 

From: gdu...@g.harvard.edu <gdu...@g.harvard.edu> on behalf of Durand, Gustavo <gdu...@iq.harvard.edu>
Sent: Wednesday, May 11, 2016 11:35 AM

 

1. Yes, sort of. It's not just delete, but also interact, e.g. download, as we do keep track of who downloaded something.

 

2. You have to keep them. In our case, I think we realized that there wasn't much use to deactivating accounts as those people could create new accounts. What they could do is remove all role assignments from those accounts.

On Wed, May 11, 2016 at 11:32 AM, Condon, Kevin M <kco...@hmdc.harvard.edu> wrote:

This is the user migration question from Ben.

1. OK to delete/or migrate deactivated users that have not created anything?

2. What do you do with deactivated users who have created things? They want to preserve the history.

--
You received this message because you are subscribed to the Google Groups "Dataverse Migration Working Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to dataverse-migrati...@googlegroups.com.
To post to this group, send email to dataverse-m...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/dataverse-migration-wg/E1E77691-DCD1-46F3-82BA-5DCCBAC7AC5F%40dans.knaw.nl.
For more options, visit https://groups.google.com/d/optout.