Skip to content

Managing Access — A Curator's Guide

This is the curator-facing walkthrough of the access flow — the version to share when handing the door keys to a family’s curator.

Family members request access themselves, at the museum’s request page — no account, no password, nothing to install:

The request page: first and family name, email address, an optional second address and phone number, and a line about the connection to the family.

They tell the museum who they are and where their key should arrive. That’s all they ever have to do.

Within fifteen minutes, the curator receives the notification:

The notification mail: the applicant’s name, email and message, with two buttons — Welcome them, and Leave as is.

The applicant’s own words — their connection to the family — are right there. When in doubt, the family’s representative decides; the mail never pressures anyone.

Click Welcome them. A confirmation page opens in the museum’s own style, naming the applicant — nothing happens until you confirm:

The confirmation page: “Welcome Margaret Ashworth?” with a single Welcome-them button and a note that closing the page leaves the request undecided.

One more click, and it’s done:

The welcomed page: “Welcomed. Their key follows by email within the quarter hour. Nothing more to do.”

The new visitor receives their key by email — a sign-in link, no password — along with a short explanation of how the door works. You receive a confirmation that everything went through.

Not sure about a request? Click Leave as is (or simply do nothing):

The left-as-is page: “Left as is. The request simply rests in the access table — no answer was sent, nothing changed.”

No rejection is sent. The request just waits, and you can welcome them any time later. This is deliberate: nobody should be forced to formally turn away a relative.

Every notification mail links to the family’s access table. Find the person’s row and set their status to disabled — their access ends within fifteen minutes. Their row (and the family’s history) stays.

The access table is also the always-works fallback: anything the mail buttons do, changing a status there does too.

Everything in this flow settles within fifteen minutes — welcomes, removals, key deliveries. That’s by design: the museum is a calm place, and so is its machinery.