Role logic

A. Curation

A1. Is user superuser, has curator_all assigned, or is the default curator_all option checked?

• If yes, assign curator_all role (including for self). Go to B.
• If no, go to A2.

A2. Does user have a valid identity in Identity API?

• If yes, assign curator_self role. Go to B.
• If no, do not assign a curator role. Go to B

B. Reporter

B1. Is user superuser, has reporter_all assigned, or is the default reporter_all option checked?

• If yes, assign reporter_all role. Go to C.
• If no, go to C.

C. Configuration

C1. Does user have superuser role assigned?

• If yes, assign ability to update the "Configuration" tab.
• If no, this user does not have any roles. Display error message: "You have successfully authenticated, but you don't have any roles assigned. Please contact a system administrator."