User Permissions

[tomarra]

Only certain people should be allowed to add and delete places. Let's look for a good permissions solution.

Here is one possibility, https://github.com/makandra/aegis

[yuriy1337]

Hmm I was thinking about this, and everyone going to lunch should be able to add choices. If anything, we should get the groups set up and then it can be group creator only or the whole group. We should not have it so we can pick and choose who can add places and who can't.

[tomarra]

Hence the link I put in the description ;)

[yuriy1337]

I was talking about how we should specifically implement it. The link is just to a gem. I don't see what you are saying.

[tomarra]

Try reading the project description.

[yuriy1337]

"Aegis - A complete authorization solution for Rails
Aegis is an authorization solution for Ruby on Rails that supports roles and a RESTish, resource-style declaration of permission rules. Getting started with Aegis is easy and requires very little integration. As your authorization requirements become more complex, Aegis will grow with you."

Has nothing to do with what I said.

I was saying that I am against permissions.

[tomarra]

So right now anyone can go in and delete all the places and categories. You don't think that should be controlled somehow?

[yuriy1337]

Thats why we [are going to] have groups. You only allow people you know to join your group who goes to lunch with you. Anyone within the group should be able to add or delete places. And each group should have their own set of categories and places.

[tomarra]

I think we should have at least 3 "levels".

1. Users - Everyone falls into this
2. Group Admin's - Can let members in and out of groups
3. Site Admin's - So you don't have to go on the box to adjust the site

[yuriy1337]

That would be fine.