School Moderation and Private Sharing Groups

[AndrewMagliozzi]

Perhaps the most commonly requested feature is a closed group for sharing notes and resources.

This is also a potential revenue model in emulation of GitHub. Pay for privacy but public sharing is free.

The implementation of this will require discussion and design.

[btbonval]

Sounds like more RBAC.

On Tue, Jan 7, 2014 at 6:14 PM, Andrew Magliozzi notifications@github.comwrote:

Perhaps the most commonly requested feature is a closed group for sharing notes and resources.

This is also a potential revenue model in emulation of GitHub. Pay for privacy but public sharing is free.

The implementation of this will require discussion and design.

— Reply to this email directly or view it on GitHubhttps://github.com/FinalsClub/karmaworld/issues/258 .

[btbonval]

Django has RBAC: https://docs.djangoproject.com/en/1.5/topics/auth/

Users, Permissions, Groups. Only thing missing is Resources, but my guess is that methods are resources which are decorated with permissions. That's the usual way to do it. I should probably read about this.

[btbonval]

Django Admin page sets out all the permissions that exist, and they appear to be on a per-model basis. So it's the cartesian product of [Create, Delete, Update] x [each Model].

Unfortunately this does not automatically lend itself well to submodel resolution. For example, a group which can CRUD on a subset of Notes, rather than the Notes model as a whole. This same thing will be applicable to moderation based on school (which we discussed but I didn't find a ticket for).

[btbonval]

In addition to users creating private groups for sharing notes and so forth, this ticket also covers creating moderator pages specific to schools. It should be the same underlying RBAC stuff.