maiera / gde-app

Apache License 2.0
22 stars 9 forks source link

Multiple emails on Account Object #133

Closed SmokyBob closed 9 years ago

SmokyBob commented 9 years ago

Backend insert and delete are authorized checking if the current user email is in one of the GDEs account objects. The Masterlist has 2 email columns, the first is the one used for public exposure and the one associated with the GDE Google Plus Profile, but in some cases it's not and the second email (private email) is the one associated with the Google Plus Profile. As the second email is not saved in the account object, some GDEs can login correctly in the web App (auth check by plus_id) but fail during save and update of activities.

TODOs:

As account.email is used only for the auth of backend inserts and not exposed, if auth check is simpler to implement with on a CSV list of email on a single field (ex. account.email='mauro.solcia@gigmail.com,mauro.solcia@sa.com') we can do that

patt0 commented 9 years ago

I will take this up as soon as I get this done https://github.com/maiera/gde-app/issues/134

SmokyBob commented 9 years ago

In the last GDE app meeting (2015-01-21) was decided to have only one email and that email needs to be the same associated to the Google + profile of the GDE. The email is used only for Auth on the backend, and for comunications from the Tracking app.