alphagov/whitehall — pull request #9 by jamiecobbett (2012-06-29 16:10:17+00:00)
Title: Require signin permission for all signed-in actions

THIS MUST NOT BE MERGED WITHOUT MAKING CHANGES IN ALPHAGOV_DEPLOYMENT

Rolling out this change without changes in alphagov_deployment will mean no-one can use the admin pages or signin. The changes will consist of: 1) update the gds-sso config, 2) change the cookie secret token to force everyone to be logged out so that when they log back in, the permissions from signonotron2 will be copied over to the app.

These changes are part of the work that allows GDS to control who is able to use which application. There are changes waiting to be merged on signonotron2 that provide a UI for editing a user's permissions. All users in production should already have "signin" permission to every app.