Skip to contents

De-Identified Export Module - Server Function

Usage

modDeidentifiedExportServer(id, pedigree)

Arguments

id

character vector of length 1. Module namespace identifier.

pedigree

reactive returning the current pedigree data.frame (shared$currentPedigree, D1) – not a fresh upload, unlike modCrossCenterIdentityServer.

Value

A list with reactive components:

  • exportedPedigree - the most recent obfuscatePed output

  • map - the corresponding id alias map (obfuscatePed's map=TRUE return)

  • manifest - the D4 transformation manifest, built from the EXACT parameters that produced exportedPedigree (captured at preview time, not re-read from live input state – a curator who tweaks the configuration after previewing but before exporting must not get a manifest describing different parameters than what was actually exported)

  • confirmed - logical: has the modal confirm gate been accepted for the current preview. Resets to FALSE whenever the preview is regenerated (mirrors modCrossCenterIdentityServer's own D5 stale-confirmation -reset pattern), so a stale confirmation can never silently unlock exports for changed output.

Downloads are not hard-gated on confirmed (mirroring modCrossCenterIdentityServer's own precedent exactly) – per this issue's own ratified framing, "curator-controlled" means a confirmation dialog and warning text, not real access control (sec 1.2).