Closed whytheplatypus closed 5 years ago
The model could be called a Grant
.
Also the resource
might make more sense as a string, a namespaced reference to the type of resource being granted access to. Validation would be possible against something like registered resources (think registered backends in django social oauth or similar)
'Grant' has meaning in OAuth
That inspired the idea: A Grant
of access. An AccessGrant
or ResourceGrant
could both be more clear.
This is complete.
Done.
A member who own's a resource (e.g. oauth token) should be able to give authorization to an organization to use that resource.
Model: