Implement user license(s) agreement features

[paynejd]

Many vocabularies require an explicit license agreement, and those licenses change over time and users must agree to the updated licenses. OCL will be required to track user agreements to licenses, and must block access to the application to a user that does not have up-to-date license agreements. When a user signs in, they should not be allowed to complete the sign in process unless they have agreed to all required licenses. It is possible that there will be licenses that are not required and these will instead be connected to user/group permissions, though we have not fleshed this out at all. We will likely also be required to block API access to users that have not completed certain licensing requirements.

[jamlung-ri]

Some basic ideas (not final):
For near term:

• Anytime you access an organization/source/concept from a licensed organization in the UI, you have to accept that license agreement as a popup.
  • This should apply to global search, where the concept list is filtered out
• For logged in users, this agreement can be remembered for a period of time
• API tokens must accept the license agreement in the UI before

For long term:

• Need communications about updating license agreement
• Grace period for API users when license agreement is updated
• Should allow license agreements that are more than just a simple Accept - should tie a user’s account to a reviewed and accepted agreement

[jamlung-ri]

This needs more discussion between Joe, Jon, and Sunny.