search

muqa-org / zazelenimo

Municipal Quadratic Funding Initiative
https://zazelenimo.com
MIT License
3 stars 1 forks source link

let user prove they have an authorisation to represent an organisation #6

Open tomislavmamic opened 5 months ago

tomislavmamic commented 5 months ago

Check authorization

In some cases, we might need to make sure we know exactly who the user is to manage his access to the features. For example, we might require a proof of authorization by person submitting a grant proposal in the name of an organisation.

In these cases, the user should upload proof of authorization or we should use some governmental service to check for authorization.

Feature: KYC
  As a program manager
  I want to make sure only authorized persons can apply on the behalf of an organisation
  Because I want to prevent impersonation

  Scenario: User applies on behalf of organisation
b0rza commented 5 months ago

This looks like a post-MVP issue, or a lower priority one. I think it would be ok if we just have a mechanism for whitelisting these people for now, using eg. wallet address.

kkatusic commented 5 months ago

Will we require for example email confirmation?

b0rza commented 5 months ago

Sure we can add that just to make sure they own the address, but not really necessary if whitelisting.