rit-sse / mentoring-tools

Tools. For the mentors.

1 stars 0 forks source link

Authentication #15

Open Michael-Longley opened 5 years ago

Michael-Longley commented 5 years ago

User Story

As a mentor and the mentoring head I want to make sure that only mentors have access to the tool to ensure the highest quality questions are used for the exams.

Acceptance Criteria

As a normal @rit.edu account the tool should display a message that the permissions are incorrect
As a mentor @rit.edu account the tool should allow the user to create new questions
As the mentoring head @rit.edu account the tool should allow the creation of exams

Question

Should any mentor be able to approve exam questions or just a sub group of "senior" mentors? @lindseyferretti

Dependencies

https://github.com/rit-sse/mentoring-tools/issues/4

wylaris commented 5 years ago

Idea: Potentially using Google OAuth2, limiting the domain to rit.edu, and adding an extra step in the authentication flow to check against a whitelist (table in our DB). This would allow us to have our own separate authentication system from the SSE that avoids having any dependency on that shit show of a product.