...
I did look into the user question, but the access logs track the IP addresses rather than the specific user. I was seeing a fair number of shared IP addresses on the [user.login] table where different users were accessing Slate on the same day from the same IP address. We could probably make educated guesses in most cases based on the timing of the login and the timing of the query run, but I suspect there would still be some ambiguous cases. Happy to pursue that further though if you'd find it helpful—for the runs on the local bases, we could list the distinct IP addresses and any users who logged in using that IP address where the login date was the same as the run date.