Add a login system

[scizzorz]

Users log in with their LDAP account (I hope), and then Pyboard uses that to provide access to things like the grades and submissions. This stops students from submitting things for other students, automatically detects which section they're in, only lets them edit their own email, enables administrator powers, etc.

Migrating / extra testing

• Remove sections file - it was only used on the submission page before, and now the section is autodetected based on the logged in user
• Add admins file - a list of LDAP usernames that have elevated privileges, one per line
• Verify that the LDAP log in system works
• Verify that assignment submissions work
• Verify that only administrators can view /admin and /download/<section>/<assignment>

[philipdexter]

Wow, lots of great additions.

One thing I'm a little hesitant about is the need of logging in to submit an assignment (even though that would mean auto-detection of sections). I haven't made up my mind if I want that or not. Logging in adds another step for students (not a painful step or anything, but still). If students wanted to submit a file for somebody else (in an attempt to cheat) they can just email among themselves. I always use moss when I check assignments, so if two students submit the same thing I'll catch them anyways. Now, if students submit for somebody else in some joke attempt, like submitting some random image, then I can understand it. I haven't had that issue before though. Thoughts?

Logging in to change an email is great though. Also, the admin page is a godsend. Now Lander can look stuff up without email me all the time.

[scizzorz]

Personally, I think logging in to submit is the better option. It guarantees that the person submitting at least has a valid account and the uploads can be traced back to that account; right now, anyone can just mass upload anything they want, as frequently as they want, and with no way to track it other than by IP. You could end up with 30k uploads of a 5mb file from someone named "philsucksLOL" and Pyboard won't complain about it.

In terms of adding extra steps for students, I think it's incredibly trivial. Either way they're typing a username; all a login changes is that they type a password and hit return (or click submit) instead of picking a section and hitting tab (or click the assignment dropdown).

[scizzorz]

It also adds an extra verification that they're submitting the assignment correctly - if I were to submit an assignment and accidentally typed my BU ID as jweaco1, the grader might not catch the typo and would give me a zero. Being forced to log in insures that my ID is spelled correctly. Also pretty trivial, but an advantage nonetheless.

[philipdexter]

True, good points. It's nieve of me to think that nobody would abuse a login-free system. I'll test all these additions later today and then merge hopefully tonight.

[philipdexter]

Merging later this evening