wagn/wagn — pull request #171 by ethn (2014-05-05 20:44:45+00:00)
Title: Account Permissions

There is a little extra customization in account perms at present to make sure account information is not exposed despite the fact that our permissions system doesn't yet deeply support the patterns we want, especially setting permissions based on creator/owner http://wagn.org/support_owner_permissions.

I redid things a bit here to make it so that the card representation has it that all of these cards' CRUD permissions are, by default, restricted to "Administrator", but that the code modification actually allows these core permissions to the account owner, too. So while there may be a rule that says only Admin can read your +*email card, you can actually read your own email (but not others' emails).

(Note that there are only explicit rules for *read permissions. The other rules default to Administrator thanks to the default *rstar+*read rules).