Protect functions by ACL

[pbijdens]

The system now supports ACLs and login. The plan to use these is as follows:

• Add an optional read ACL to competitions
  • These competitions (and matches) will only show up when a user logs in with access to them, essentially introducing private competitions
• Add an optional update ACL to competitions
  • Only users in that ACL may use the management UI to update those competitions and matches
• Add an optional update ACL to personal-best and member list
  • Only logged in users assigned to that ACL can update these lists
• Add an optional power-ACL to competitions
  • Only users in that ACL may delete the competition or matches in it
• Add an optional power-ACL to personal-best and member list
  • Only users in that ACL may delete the list or entries in it.

[pbijdens]

The ultimate goal of this effort is to allow multiple groups of archers to use the system, without them causing problems for the others. For example, a trainer may organize a competition for their training group, without also being allowed to also edit the details of the club-competition, tweak scores etc.

For now, the system is closed.