moonfire-nvr/design
Scott Lamb fda7e4ca2b add concept of user/session permissions
(I also considered the names "capabilities" and "scopes", but I think
"permissions" is the most widely understood.)

This is increasingly necessary as the web API becomes more capable.
Among other things, it allows:

* non-administrator users who can view but not access camera passwords
  or change any state
* workers that update signal state based on cameras' built-in motion
  detection or a security system's events but don't need to view videos
* control over what can be done without authenticating

Currently session permissions are just copied from user permissions, but
you can also imagine admin sessions vs not, as a checkbox when signing
in. This would match the standard Unix workflow of using a
non-administrative session most of the time.

Relevant to my current signals work (#28) and to the addition of an
administrative API (#35, including #66).
2019-06-19 15:34:20 -07:00
..
api.md add concept of user/session permissions 2019-06-19 15:34:20 -07:00
schema.md few small markdown tweaks 2018-08-24 21:04:13 -07:00
time-frames.png try again to fix time.md diagram 2016-12-26 21:41:19 -08:00
time.md update design docs for new-schema branch changes 2018-03-24 20:51:30 -07:00