Skip to content
This repository has been archived by the owner on Sep 1, 2021. It is now read-only.

Need a new authorization system #195

Open
OysteinAmundsen opened this issue Oct 15, 2017 · 2 comments
Open

Need a new authorization system #195

OysteinAmundsen opened this issue Oct 15, 2017 · 2 comments
Labels
feature Hard security

Comments

@OysteinAmundsen
Copy link
Owner

The incremental role system implemented will not suffice. Secretariat should have privileges to enter scores. Club should not, but Club should have privileges to enter teams. Secretariat should not.
@OysteinAmundsen OysteinAmundsen added this to the v1.1.0 milestone Oct 15, 2017
@OysteinAmundsen OysteinAmundsen modified the milestones: v1.1.0, v2.0.0 Oct 22, 2017
@OysteinAmundsen OysteinAmundsen removed this from the v2.0.0 milestone Feb 28, 2019
@OysteinAmundsen
Copy link
Owner Author

Closing registration in order to prevent unwanted tampering during upcoming tournament. This must be prioritized.

@OysteinAmundsen
Copy link
Owner Author

Suggest creating a new entity for this with a many-to-many relation to user. This allows a user to have multiple roles. We can even attach a role to a specific tournament in order to achieve event based privileges.

@snyk-bot snyk-bot mentioned this issue Mar 17, 2020
Merged
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
feature Hard security
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@OysteinAmundsen