Authorization/Authentication

[mattmakesmaps]

Users that are members of a particular client group should only be able to see those datasets associated with the that particular client.

• Update URL redirects for login and logout. User should be redirected to current page after all login/logout actions.
• Add Authorization/Authentication logic to:
  • Groups
  • Group Details
  • Services
• I think I'll need to create a test for a user to pass... a user should be a member of a group associated with the particular client.

[mattmakesmaps]

Looks like there are two paths to go about it.

Create a Custom User Model.

Note Remember to update settings.py to point to new user model.

Pros:

• No need for passing signals around, as a ManyToManyField links a user to clients directly.

Cons

• May be overkill for what I'm trying to do.
• Unclear what interactions will be like with GeoDjango

Create a Separate Profile Model

Pros:

• Probably simpler.
• Abstracts non-default user data from the user model.
• According to TSofD, this is the reccommended method for my use case (adding a related field).

Cons:

• Need to automatically add/remove/update users to the profile model in the event a new user object is created/deleted/updated.