@eaquigley just a heads up that soon I'll be creating a new 4.2.1 branch from the 4.3 branch and I might make it the default.

@eaquigley I just created the 4.2.1 branch so if you plan to put this issue through QA for the 4.2.1 milestone, please put your commits in the 4.2.1 branch and change the milestone to 4.2.1.

@eaquigley I don't know if you plan to cover in the guides the fact that roles can be created but @kcondon just reported how it's possible to create roles with combinations of permissions that lead to poor usability in my opinion, such as having a role with only the "ViewUnpublishedDataset" permission: #2648 (comment)

As Dataverse ships with a default set of roles, may I suggest to explain these roles first? Normal users, including admins, will not be able to create (or update/delete) roles. Relevant roles should be explained at the various levels of role assignment, i.e. both in "Dataverse management" and "Dataset + File management".

Before making major changes in the user guide, however, the role assignment pages should be given appropriate thought as requested/described in #2255, #2354 (likely dupe of #2255), #2241 (likely dupe of #2232) and possibly other issues. For example, for DataverseNL partners it is more obvious to grant users the Dataset Creator role than the Contributor role, but that is not a "short-hand option" like Curator and Contributor are.

Related: #2616

Two things. People continue to struggle with permissions, such as yesterday at https://groups.google.com/d/msg/dataverse-community/OebwRJZwDHY/4LxOf_BSBAAJ .

Also, I'm consolidating the following ticket into this one and I think it's a good idea we should consider: Permissions: List roles in order of power of permissions #3040

EDIT: This comment has been made into a new issue, #4148

I've encountered a usability issue while writing docs for dataset permissions. Paging @TaniaSchlatter and @mheppler for their consideration.

The file-level permissions page can only be accessed through the dataset page, like so:

--
This link brings you to this page:

On this page, you can click "Grant Access to Users/Groups" to see this modal:

Here you can grant specific users access to specific restricted files. As far as I can tell, this is the only place you can do this.

I expected to be able to do this via the file page for each specific file, but I can't find any option to do that:

I recommend we include a menu option where I've drawn that arrow, called "Permissions", that takes the user to a page where they can grant specific users access to this file.

Now that we have file pages, it's completely unintuitive to force users to go to the dataset level to grant access to a specific file.

@dlmurphy , could you open that as a separate issue?

It is true, and technically we could use some aspect of the current ManagePermissionsPage as it could be used for a file. It may not be ideal, but would be the easiest.

@scolapasta Good call, I created issue #4148 for this. I'll put that info from your comment in there too.