tomislavmamic commented 1 month ago

Check authorization

In some cases, we might need to make sure we know exactly who the user is to manage his access to the features. For example, we might require a proof of authorization by person submitting a grant proposal in the name of an organisation.

In these cases, the user should upload proof of authorization or we should use some governmental service to check for authorization.

Feature: KYC
  As a program manager
  I want to make sure only authorized persons can apply on the behalf of an organisation
  Because I want to prevent impersonation

  Scenario: User applies on behalf of organisation

b0rza commented 3 weeks ago

This looks like a post-MVP issue, or a lower priority one. I think it would be ok if we just have a mechanism for whitelisting these people for now, using eg. wallet address.

kkatusic commented 3 weeks ago

Will we require for example email confirmation?

b0rza commented 3 weeks ago

Sure we can add that just to make sure they own the address, but not really necessary if whitelisting.

muqa-org / demo

let user prove they have an authorisation to represent an organisation #6

Check authorization