motine / Ohouse

Ohouse
Other
3 stars 2 forks source link

Implement and use certificate and credential checks #22

Open broadbent opened 10 years ago

broadbent commented 10 years ago

No authorisation takes place to determine whether a user can perform a particular operation. This includes the access to particular fields of data.

broadbent commented 10 years ago

This functionality could also be achieved through the use of delegate guards, as was used in the early Ohouse version. See omavonedelegateguard.py for an example.

motine commented 10 years ago

yeah, in that context we should talk about admin certs as well. how do they come about? and what are the other roles...