Skip to content

Collabra Authsome mode

Jure requested to merge collabra-authsome into master

This should be a drop-in replacement, working exactly the same for admin users, with some functionality built in for 'Managing Editors', 'Senior Editors' and 'Reviewers', and a good set of defaults for further dev.

Adds:

  1. a skeleton for a Collabra authorization mode. It should be easy to continue the authorization work with this as a basis.
  2. a UsersManager link at /users. There you can manage membership in global teams (to answer questions like: is a user a 'Managing Editor'?).

I see further development happening by:

  1. adding a new test where you set the conditions as they need to be for a certain check (e.g. create a manuscript that is in 'review', and then check that the user can't read the 'review' fragments, etc.)
  2. write the authsome mode code to handle that situation
  3. repeat

Most of the tests should be in https://gitlab.coko.foundation/xpub/xpub/blob/bc28440e5ff0eddb3c9e3dfd71fb19fe05aa97e0/test/authsome/index.test.js, but one can write some integration tests too (these actually talk to the server and create objects, etc).

Edited by Jure

Merge request reports