The access rights management

All entities that requires access rights management are linked to one ‘Assessment’ entity by the relation ‘in_assessment’. As the access rights are set on the ‘Assessment’ entity through the ‘can_read’ and ‘can_update’ relations, the concerned entity are accessible only by authorized users. See schema below:

Cube access rights management

class cubes.piws.schema.security.can_read(subject=None, name=None, object=None, package=None, **kwargs)

Link a group to an assessment with this relation to give the group users read access to the assessment related entities.

class cubes.piws.schema.security.can_update(subject=None, name=None, object=None, package=None, **kwargs)

Link a group to an assessment with this relation to give the group users write access to the assessment related entities.

class cubes.piws.schema.security.in_assessment(name=None, **kwargs)

Relate entities to an assessment with this relation in order to apply the proposed simplified rights management mechanism.