NSS-Day-Cohort-49 / tabloid-mvc-cassettes

tabloid-mvc-tabloid-mvc-cassettes created by GitHub Classroom
0 stars 1 forks source link

Restrict User Profile Privileges #15

Open joshdbarton opened 2 years ago

joshdbarton commented 2 years ago

As the Tabloid application owner I would like the privileges of users throughout the system to be restricted based on their user type so that unauthorized users cannot corrupt, delete or view data in the system.

The privileges of each user type are listed below:

NOTE: Implementing the features outlined in this story will require updating some existing functionality in the system.

NOTE: The dev team may find it useful to break this story into smaller stories in order to facilitate assigning tasks to team members and keeping track of the work.

NOTE: Some of the privileges listed below refer to features that are further down in this backlog. When those future stories are worked, please refer back to this story for a description of the privileges.

NOTE: The order of privileges is does not indicate their priority.

Unauthenticated users can...

Authors can...

Admins can...

hcrudge commented 2 years ago

45 min