cens/ohmageServer — Issue #232: ACL rework
Author: joshuaselsky
Created: 2012-03-09 19:08:02+00:00
State: open

Our access control rules are too complex and don't handle certain use cases: (1) the public sandbox with self-registration requires a giant generic class to hold all users -- this is a security and privacy issue and (2) mobile health or clinical research campaigns require mutually exclusive groups of users -- i.e., the class boundary cannot be crossed when adding a class to a campaign -- and the only way to do this in 2.x is to copy the same campaign for each clinician-patient group.