Implement Authorisation

datagovuk / dgu2

Experimental publishing prototype

MIT License

0 stars 1 forks source link

Implement Authorisation #16

Open rossjones opened 8 years ago

rossjones commented 8 years ago

We should have some rules about who can do what. The publishers a user belongs to should be added during authn (#12) so that we can avoid different components making the same queries. This way we can pass the conn into an Authz module for checks.

rossjones commented 8 years ago

[ ] Must remember to go back and implement this for admin.
[ ] Need to fix the publisher template in PR #40