2.- Key Concepts

Documentation Moderators Guide
1

2.- Key Concepts

2.1 What is Discourse and How Does it Work?
2.2 Roles on the Platform
2.3 Confidentiality and Relevant Regulations

This section provides an introduction to the basic concepts needed to understand how Discourse works, the roles involved in managing the platform, and the regulations that apply to confidentiality and information security.

2.1 What is Discourse and How Does it Work?

Discourse is a modern and flexible forum platform designed to foster online communities. It is characterized by its intuitive design, advanced features, and customization capabilities. Its primary goal is to facilitate constructive discussions and organize content efficiently.

  • Main Features:

    • Hierarchical Structure: Discourse organizes content into categories, subcategories, and topics, with tags that simplify navigation.
    • Trust Level System: Assigns privileges to users based on their interaction and contribution to the platform.
    • Advanced Moderation: Allows moderators and administrators to manage content, users, and settings through centralized dashboards.
    • Interactivity: Includes notifications, real-time replies, and tools such as polls and lists.
    • Integrations: Compatible with external tools like Google Drive and custom APIs.

  • General Workflow:

    • Users create and participate in topics organized by categories.
    • Moderators oversee activity and ensure the community adheres to the rules.
    • Administrators configure permissions, roles, and advanced settings to ensure security and usability.

2.2 Roles on the Platform

Discourse assigns specific roles to community participants, each with different responsibilities and permissions:

  • 1. Administrator
    • Responsibilities:
      • Configure and customize the platform.
      • Manage categories, subcategories, and user groups.
      • Review and adjust access permissions.
      • Oversee platform security.
    • Privileges:
      • Full access to all tools and settings.
      • Ability to conduct audits and solve complex technical issues.
  • 2. Moderator
    • Responsibilities:
      • Supervise published content to ensure it adheres to community standards.
      • Approve, edit, or delete posts as needed.
      • Resolve conflicts between users.
      • Collaborate with administrators to adjust roles and permissions.
    • Privileges:
      • Advanced moderation tools, such as moving topics, merging posts, and managing flags.
      • Access to the private Staff category to discuss and coordinate actions.
  • 3. User
    • Responsibilities:
      • Participate in the community by creating topics and responding to posts.
      • Follow platform guidelines and contribute constructively.
      • Use tools like flags to report inappropriate content.
    • Privileges:
      • Vary by trust level:
        • Level 0: Basic access with restrictions (e.g., limited number of posts).
        • Levels 1–4: Progressively expanded access, including the ability to edit and moderate their own posts.
  • 4. Groups
    • Groups are a powerful tool in Discourse for organizing users and controlling their access to specific categories or features. They allow flexible management of permissions for users with similar roles or needs.

      • Common Types of Groups:

        • Role-Based Groups:
          • Example: Moderators, Administrators.
          • Used to manage permissions for users with specific functions on the platform.
        • Category-Based Groups:
          • Example: External Collaborators, Clinical Scientists.
          • Used to restrict access to certain categories based on the content’s nature.
        • Temporary or Project-Based Groups:
          • Example: Clinical Trial X.
          • Used to manage users involved in a specific project for a limited time.

      • Functions of Groups:

        • Access Management:
          • Define who can view, post, or moderate content in specific categories.
        • Custom Notifications:
          • Send messages or notifications to all group members.
        • Focused Collaboration:
          • Create exclusive spaces for group-specific discussions.

      • Moderator Responsibilities for Groups:

        • Supervision: Ensure that users within a group have permissions consistent with their responsibilities.
        • Request Adjustments: Propose the creation or modification of groups to meet new community needs.
        • Facilitate Entry or Exit: Work with administrators to admit or exclude group members as appropriate.

2.3 Confidentiality and Relevant Regulations

Data security and privacy are fundamental pillars of Discourse, especially when handling sensitive information like clinical or personal data. Adherence to international regulations ensures a secure and ethical environment.

1. GDPR (General Data Protection Regulation)

Applicable in the European Union, it regulates the processing of personal data.

  • Relevance to Discourse:

    • Ensures user data is anonymized and protected.

    • Allows users to manage their information (e.g., requests for data deletion).

2. ISO 27001 (Information Security Management)

An international standard for implementing information security management systems (ISMS).

  • Relevance to Discourse:

    • Ensures platform configurations and access are protected against security breaches.

    • Guarantees data integrity and availability.

3. Best Practices for Ensuring Confidentiality:

Anonymization: Remove or modify identifiable data from users or posts.

Access Control: Apply the principle of least privilege to manage permissions.

Regular Audits: Review settings and permissions periodically to prevent vulnerabilities.