moonfire-nvr/db/upgrade
Scott Lamb fda7e4ca2b add concept of user/session permissions
(I also considered the names "capabilities" and "scopes", but I think
"permissions" is the most widely understood.)

This is increasingly necessary as the web API becomes more capable.
Among other things, it allows:

* non-administrator users who can view but not access camera passwords
  or change any state
* workers that update signal state based on cameras' built-in motion
  detection or a security system's events but don't need to view videos
* control over what can be done without authenticating

Currently session permissions are just copied from user permissions, but
you can also imagine admin sessions vs not, as a checkbox when signing
in. This would match the standard Unix workflow of using a
non-administrative session most of the time.

Relevant to my current signals work (#28) and to the addition of an
administrative API (#35, including #66).
2019-06-19 15:34:20 -07:00
..
mod.rs cargo fix --all 2019-06-14 08:47:11 -07:00
v0_to_v1.rs cargo fix --all 2019-06-14 08:47:11 -07:00
v1_to_v2.rs add concept of user/session permissions 2019-06-19 15:34:20 -07:00
v2_to_v3.rs add concept of user/session permissions 2019-06-19 15:34:20 -07:00
v3_to_v4.rs add concept of user/session permissions 2019-06-19 15:34:20 -07:00