The basic idea here will be to create a simple method that takes in a user and a permission and returns a List of Dataverses. We'll want it in a performant way, so will want to query the db directly as much as possible. (for direct assignments easy, we also need to determine groups the user is in...)

• Do we do something in MyData that we could leverage here? Not sure if we do, but let's check. MyData may not account for groups (or groups within groups)
• Possible solution: get user, figure groups they are in, get list of roles for that user groups
• What speed(s) should constitute success here? Some powerusers may take longer. Some benchmarking would be helpful here.
• We've optimized the other way (object to user) so there may be something to be learned there

2024/03/14

• sized at 10 for investigation, might be larger. @scolapasta may have insight.

To focus on the most important features and bugs, we are closing issues created before 2020 (version 5.0) that are not new feature requests with the label 'Type: Feature'.

If you created this issue and you feel the team should revisit this decision, please reopen the issue and leave a comment.

@scolapasta @pdurbin @landreev
Is this API being called as a User with their credentials to get their accessible collections or is it being called by an Administrator?
The main reason for the ask is around IPgroups and ShibGroup. Neither of these would allow an admin to figure out the access since the user is not connected with an IP address or logged in with Shibboleth.