distributeaid / toolbox

DistributeAid Toolbox
http://distributeaid.org
GNU Affero General Public License v3.0
3 stars 1 forks source link

Group invites Api #110

Open pedro-gutierrez opened 3 years ago

pedro-gutierrez commented 3 years ago

Is your feature request related to a problem? Please describe.

As a general practice we should probably avoid sharing data about users to other users unless they're in the same group or privileged since security is a concern and trust between different groups isn't a given.

Describe the solution you'd like

The simplest thing for now is the focus on group-to-group interactions. No need to show users in another group

Eg: - if you want to invite someone to a shipment or whatever then you can just invite the group. If the group accepts the invite then anyone in the group can access the shipment.

How we can implement this