[UC] Requesting access to (business) data

[uvdsl]

Status: Draft

As a data consumer, e.g. user of a business application,
I want to be able to request access to (business) data,
So that adoption for existing business processes is not impeeded.

Preconditions:

What conditions must be in place or assumed before this use case can begin?

• data consumer knows what data to request from whom

Trigger:

What (user or system) event or action initiates this use case?

• business need / business process induced

Actors:

Describe the primary actor, and any other relevant actors involved in this use case

• data consumer
• data provider

Distinction:

What unique challenges or distinguishing factors (like technical issues, user experience needs, workflow integration, etc.) are associated with this use case?

• description of

  • which data
  • for which purpose
  • from which data provider
  • for which data consumer
  • sent by which actor

• potentially a corresponding interaction procotol

Scenario:

Describe an ideal or happy-case scenario where this use case would play out as intended.

The data consumer requests access to specific data for a specific purpose from a data provider.
Data provider grants access to the specified data (cf. use case ).

Alternative case(s):

What alternative flows or variations should the system handle for this use case?

Data provider rejects access request. No access is granted.

Error scenario:

What unexpected issues or errors might arise, and how should the system handle them?

Data provider revokes access later. Data consumer does not have access.
Data consumer can request access again.

Acceptance Criteria:

What conditions or criteria must be met for this use case to be considered successfully handled? What limitations are acceptable?

It must be clear how a data consumer can express a request to access certain data is to be represented.

References:

List any relevant resources or examples that could inform this use case, possibly from other domains or solutions.

Solid Community:

• Solid Application Interoperability specification

Publications:

• Hadrien Bailly, Anoop Papanna, Rob Brennan:
  Prototyping an End-User User Interface for the Solid Application Interoperability Specification Under GDPR. ESWC 2023: 557-573
  (received best in-use paper award)

• Andreas Both, Thorsten Kastner, Dustin Yeboah, Christoph Braun, Daniel Schraudner, Sebastian Schmid, Tobias Käfer, Andreas Harth:
  AuthApp - Portable, Reusable Solid App for GDPR-Compliant Access Granting. ICWE 2024: 199-214
  (received best research paper award)

Research projects:

• MANDAT Project: In a nutshell, MANDAT is about researching methods for exchange of company-related data (in data ecosystems where a data fiduciary may exist) and solving the problems that arise on the way, using the Solid protocol.
  MANDAT is supported by the German Ministry for Education and Research (BMBF) under grant 16DTM107, specifically FKZn 16DTM107A, 16DTM107B, and 16DTM107C, which are funded by the European Union -- NextGenerationEU.