What is needed
Currently the permission management concerning data upload is lacking.
A user is able to upload data to any project as soon as he knows the measurementid within that project.
Ideally, the data submitter needs to provide some sort of proof of having been granted access to the project in question before the data upload is accepted.
Keep in mind
We want to have a clear boundary between data submitter and the project/experiment metadata stored within the data manager. Therefore, adding the submitter to the project is not possible to avoid leakage of experiment or user metadata stored within that project to external collaborators.