{"action":"created","issue":{"url":"https://api.github.com/repos/govCMS/govCMS/issues/364","repository_url":"https://api.github.com/repos/govCMS/govCMS","labels_url":"https://api.github.com/repos/govCMS/govCMS/issues/364/labels{/name}","comments_url":"https://api.github.com/repos/govCMS/govCMS/issues/364/comments","events_url":"https://api.github.com/repos/govCMS/govCMS/issues/364/events","html_url":"https://github.com/govCMS/govCMS/issues/364","id":177981343,"number":364,"title":"Research: As a content author, I'd like to upload a document to the private space to control access","user":{"login":"aleayr","id":1001532,"avatar_url":"https://avatars.githubusercontent.com/u/1001532?v=3","gravatar_id":"","url":"https://api.github.com/users/aleayr","html_url":"https://github.com/aleayr","followers_url":"https://api.github.com/users/aleayr/followers","following_url":"https://api.github.com/users/aleayr/following{/other_user}","gists_url":"https://api.github.com/users/aleayr/gists{/gist_id}","starred_url":"https://api.github.com/users/aleayr/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aleayr/subscriptions","organizations_url":"https://api.github.com/users/aleayr/orgs","repos_url":"https://api.github.com/users/aleayr/repos","events_url":"https://api.github.com/users/aleayr/events{/privacy}","received_events_url":"https://api.github.com/users/aleayr/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2016-09-20T07:04:10Z","updated_at":"2016-09-21T05:10:35Z","closed_at":null,"body":"# Full Description\r\nThis is predominantly a placeholder user story for tracking the potential for including, or making steps towards, authenticated access to sites or subsites on the govCMS platform.\r\n\r\n# Acceptance Criteria\r\n* Ensure uploaded documents are not accessible via direct links\r\n* Ensure user experience to upload private documents is intuitive\r\n\r\n# Caveat\r\nThe existence of this user story does not indicate a definitive timeframe for inclusion, nor that it will actually be implemented."},"comment":{"url":"https://api.github.com/repos/govCMS/govCMS/issues/comments/248513210","html_url":"https://github.com/govCMS/govCMS/issues/364#issuecomment-248513210","issue_url":"https://api.github.com/repos/govCMS/govCMS/issues/364","id":248513210,"user":{"login":"Podgkin","id":17282082,"avatar_url":"https://avatars.githubusercontent.com/u/17282082?v=3","gravatar_id":"","url":"https://api.github.com/users/Podgkin","html_url":"https://github.com/Podgkin","followers_url":"https://api.github.com/users/Podgkin/followers","following_url":"https://api.github.com/users/Podgkin/following{/other_user}","gists_url":"https://api.github.com/users/Podgkin/gists{/gist_id}","starred_url":"https://api.github.com/users/Podgkin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Podgkin/subscriptions","organizations_url":"https://api.github.com/users/Podgkin/orgs","repos_url":"https://api.github.com/users/Podgkin/repos","events_url":"https://api.github.com/users/Podgkin/events{/privacy}","received_events_url":"https://api.github.com/users/Podgkin/received_events","type":"User","site_admin":false},"created_at":"2016-09-21T05:10:35Z","updated_at":"2016-09-21T05:10:35Z","body":"I like the idea, but I see two issues: \r\n1. govCMS  is not security rated for making **anything** truly private, so there would have to be some definition around how much privacy is expected vs how much is technically possible. \r\n2. This is well into records management land.   If we are doing docment management now, how far are we taking it? \r\n\r\nSo my questions are: \r\n1. Who are the users? Internal or external? Are these departmental staff with a code of conduct to uphold,  or are we talking about authenticating the general public?  \r\n2. What level of security is required for these documents? Who are we hiding them from, and why?  \r\n3. Do we need to manage document revisions?  Are we integrating and syncing with existing EDRMS? \r\n\r\n\r\nFor a full records management solution, you'd probably want something like [filedepot](https://www.drupal.org/project/filedepot) with [organic groups](https://www.drupal.org/project/og). If you were really keen you could have AD integration with [LDAP for OG](https://www.drupal.org/node/1443428), which would make anyone with internal distributed authoriship very happy. Using filedepot might also solve [issue 362](https://github.com/govCMS/govCMS/issues/362).   \r\n\r\nIf you just want a basic out of the box solution today, just use trim links.  You can use existing access controls to limit who can see the link, only people with the right permissions in the EDRMS can actually open the files. and the revisions are managed for you.  If you have external users you can do a similar thing thing with invite only google docs.  "}}
{"actor":{"display_login":"Podgkin"}}