This week, I focused on working out the main plan for how users will get permission to access data. After talking with my mentor and team, we settled on a clean, simple workflow.
What We Decided:
-
Keeping it simple for public data:
If someone just wants to read public,open data,they shouldn’t have to log in or register at all. They can just view it instantly. -
Create a “Waiting Room” for restricted data:
If a user wants special access (like writing data or viewing private sensors),they will sign up and wait in a “pending” list.An admin will have to approve them first. -
Record everything in a Log:
We designed a simple “Audit Log” database table to keep a permanent history of requests and approvals.Instead of breaking the existing user tables,we will store the security rule details directly inside this log as simple text/JSON.