2009-07-07 04:57:08 |
Dan MacNeil |
bug |
|
|
added bug |
2009-07-16 16:36:02 |
Swetha |
mvhub: status |
New |
Incomplete |
|
2010-02-11 01:41:18 |
Dan MacNeil |
mvhub: status |
Incomplete |
Confirmed |
|
2010-02-11 01:41:22 |
Dan MacNeil |
mvhub: importance |
Undecided |
Low |
|
2010-03-12 02:09:17 |
Dan MacNeil |
summary |
affects use CGI::Application::Plugin::Auth* |
replace hand-rolled authentication/authorization code with CGI::Application::Plugin::Auth* |
|
2010-03-12 04:15:39 |
Dan MacNeil |
description |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
affects mvhub
tag refactor
done
The authentification / authorization is a mess.
Should re-write to use:
CGI::Application::Plugin::Authentification
CGI::Application::Plugin::Authorization
...support row level authorization for agencies
We need one username/password system (not 3)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iEYEARECAAYFAkpS1VgACgkQLzI3mETyffwUPwCeMUUZKdHWBdeI8VGTiGi12VEN
/9gAn1duT0gHfBfPiozeUIcTCtQgbHIU
=Vj2m
-----END PGP SIGNATURE----- |
The authentification / authorization is a mess.
Should re-write to use:
CGI::Application::Plugin::Authentification
CGI::Application::Plugin::Authorization
...support row level authorization for agencies
We need one username/password system (not 3)
rough notes:
use CGI::Application::Plugin::Authentification
use CGI::Application::Plugin::Authorization
use CGI::Application::Plugin::Session
check authorization in
MVHub::CGIAppBase::cgiapp_prerun
restrict access to agency/program records by
agency
restrict access to run modes by group
data_entry run modes
admin run modes
reports
table users/contacts
contact_id Name email password phone
agency_contacts
agency_id contact_id
program_contacts
program_id contact_id
agency,program table change:
add contact_id
table groups
name group_id
table user_groups
email group
user_agencies
email agency_id
|
|
2010-03-12 04:16:39 |
Dan MacNeil |
tags |
refactor |
40-plus-hours gsoc refactor |
|
2010-04-26 20:42:05 |
Dan MacNeil |
tags |
40-plus-hours gsoc refactor |
gsoc refactor time-40+hrs |
|