Authentication

[hunterowens]

What sort of authentication do we need?

[hunterowens]

I believe it will just be basic logins to view but correct me if wrong @josh5000 @gracebenedicto

[oshalygin]

How are authorizations handled?(Obviously separate from Authentication)

[hunterowens]

@oshalygin I think if auth == should be able to view everything.

[oshalygin]

then why have auth at all?

[hunterowens]

@oshalygin I may have misconstrued the question, forgive me.

Revised:

• If you're able to authenticate, then you are authorized to view everything.
• However, accounts should be controlled by admin user to only allow certain city personnel into the system.

Make sense?

[oshalygin]

Perfect thats very clear. It's a good segway into finer grained permissions in the future. The reason I bring this is up is because bolting on authorization later is always a heavy lift.

[hunterowens]

Add superusers for #8

[andreyorlov33]

@hunterowens do we need to have two different admin levels ? level 1 controls user accounts level 2 controls accounts and is able to upload data please advise.

[hunterowens]

HTTP basic auth is implemented