replace hand-rolled authentication/authorization code with CGI::Application::Plugin::Auth*

[Dan MacNeil]

The authentification / authorization is a mess.

 Should re-write to use:

CGI::Application::Plugin::Authentification
CGI::Application::Plugin::Authorization

...support row level authorization for agencies

We need one username/password system (not 3)

rough notes:

      use CGI::Application::Plugin::Authentification
        use CGI::Application::Plugin::Authorization
        use CGI::Application::Plugin::Session

        check authorization in
        MVHub::CGIAppBase::cgiapp_prerun
                restrict access to agency/program records by
                        agency

                restrict access to run modes by group
                        data_entry run modes
                        admin run modes
                        reports

        table users/contacts
                contact_id Name email password phone

        agency_contacts
                agency_id contact_id

        program_contacts
                program_id contact_id
     agency,program table change:
                add contact_id

        table groups
                name group_id

        table user_groups
                email group

        user_agencies
                email agency_id

[Swetha (cswetha25)]

What is row level authorization?
how can the admin login and agency login be the same/use the same user name and password?

[Dan MacNeil (omacneil)]

The admin / agency user won't be the same but they will be handled the same way.

Row level authorization allows you to say users can access only a sub set of records (rows) in a table

Answers to other questions are found in man pages for:

CGI::Application::Plugin::Authentification
CGI::Application::Plugin::Authorization