Authorization

[vincicat]

• [x] basic account system
• [x] extended user object
• [ ] user permission control < we are here
• [ ] publication authorization
• [ ] routing access control

Currently we are in the permission control.

[vincicat]

Flow change:

• Org walk-in sign-up: organization -> createNewUser with password -> admin roles -> send verification email
• Admin than can be create org user (no workspace assigned)

Changes:

• validation rules: any checking that user account not cover, no admin roles change (check on Meteor.methods
• ui: remind verification

Extra:

• encrypt sign-up links