mkelandis / askurkid

0 stars 0 forks source link

Role-based Authentication for Teachers & Admins #3

Open mkelandis opened 12 years ago

mkelandis commented 12 years ago

Need to implement an authentication module so that teachers can sign-in before managing their lists or sending a blast. System should have checks in place to prevent unauthorized users/bots from sending messages.

Admins should be able to log in and view teacher data, teachers should only be able to see their data.

Message Blaster should be able to update sent timestamp for a list of messages that were successfully sent. (May need to introduce a concept of exclusive locking the message for a blast so that it can't be picked up by another thread inadvertently.)

mkelandis commented 12 years ago

possible solution: http://railscasts.com/episodes/304-omniauth-identity?view=asciicast