You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As discussed with @droghetti we probably need to put a nullable FK on django users table thowards managing authority, reversing the current relation. Another idea is to assign a special group to managing authorities, maybe it's easier and cleaner?
Please let's elaborate on this topic and how we are going to manage security of various functionalities of the software.
Should django be aware of managing authorities?
Does this help us to secure the system?
The text was updated successfully, but these errors were encountered:
i thinks that, instead of changing the auth django models, we can use a group for managing authority and change the fk on the ma table to the auth_group of django.
In this way we can have:
Group Piemonte Authority (user1, user2, ..... userN)
and link the group to the MA.
As discussed with @droghetti we probably need to put a nullable FK on django users table thowards managing authority, reversing the current relation. Another idea is to assign a special group to managing authorities, maybe it's easier and cleaner?
Please let's elaborate on this topic and how we are going to manage security of various functionalities of the software.
The text was updated successfully, but these errors were encountered: