{"action":"created","issue":{"url":"https://api.github.com/repos/wuvt/trackman/issues/39","repository_url":"https://api.github.com/repos/wuvt/trackman","labels_url":"https://api.github.com/repos/wuvt/trackman/issues/39/labels{/name}","comments_url":"https://api.github.com/repos/wuvt/trackman/issues/39/comments","events_url":"https://api.github.com/repos/wuvt/trackman/issues/39/events","html_url":"https://github.com/wuvt/trackman/issues/39","id":316501622,"number":39,"title":"Trackman 2.0: Auth/Authz support","user":{"login":"echarlie","id":18043413,"avatar_url":"https://avatars3.githubusercontent.com/u/18043413?v=4","gravatar_id":"","url":"https://api.github.com/users/echarlie","html_url":"https://github.com/echarlie","followers_url":"https://api.github.com/users/echarlie/followers","following_url":"https://api.github.com/users/echarlie/following{/other_user}","gists_url":"https://api.github.com/users/echarlie/gists{/gist_id}","starred_url":"https://api.github.com/users/echarlie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/echarlie/subscriptions","organizations_url":"https://api.github.com/users/echarlie/orgs","repos_url":"https://api.github.com/users/echarlie/repos","events_url":"https://api.github.com/users/echarlie/events{/privacy}","received_events_url":"https://api.github.com/users/echarlie/received_events","type":"User","site_admin":false},"labels":[{"id":904375118,"url":"https://api.github.com/repos/wuvt/trackman/labels/enhancement","name":"enhancement","color":"a2eeef","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-04-21T15:39:28Z","updated_at":"2018-04-21T15:39:30Z","closed_at":null,"author_association":"OWNER","body":"_From @matthazinski on April 27, 2015 5:41_\n\nTrackman 2.0 should require LDAP auth. This is a major schema change. The advantage of this is that it makes a distinction between users and shows and increases security in case we eventually want to expose it to the Internet.\n\nUsers login using their WUVT LDAP credentials (and must be a member of at least one group from a list of TRACKMAN_ALLOW_GROUPS in config.py). From there, they are presented with a list of shows they are a member of, with the option of creating a new one. \n\nFor each show that is created, users specify:\n- On-air name\n- Show name\n- List of space-separated LDAP usernames that have access to this. (You can't create a group that you don't have access to yourself)\n\nAny user with access to the show may change any parameter of it, including the allowed users. Any user in any group in the list TRACKMAN_ADMIN_GROUPS (in config.py) may edit any show, regardless of whether they have been granted access by the show creator. The use case of this is staff heads, FMPD staff, technical staff, and talk shows.\n\nAny user in the librarians group (or whatever LDAP group list parameter we use in config.py) may edit historical tracks in Trackman (e.g. the ones that come up in search results).\n\nAnother ticket to follow with trackman UI changes for version 2\n\n\n_Copied from original issue: wuvt/wuvt-site#158_"},"comment":{"url":"https://api.github.com/repos/wuvt/trackman/issues/comments/383306248","html_url":"https://github.com/wuvt/trackman/issues/39#issuecomment-383306248","issue_url":"https://api.github.com/repos/wuvt/trackman/issues/39","id":383306248,"user":{"login":"echarlie","id":18043413,"avatar_url":"https://avatars3.githubusercontent.com/u/18043413?v=4","gravatar_id":"","url":"https://api.github.com/users/echarlie","html_url":"https://github.com/echarlie","followers_url":"https://api.github.com/users/echarlie/followers","following_url":"https://api.github.com/users/echarlie/following{/other_user}","gists_url":"https://api.github.com/users/echarlie/gists{/gist_id}","starred_url":"https://api.github.com/users/echarlie/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/echarlie/subscriptions","organizations_url":"https://api.github.com/users/echarlie/orgs","repos_url":"https://api.github.com/users/echarlie/repos","events_url":"https://api.github.com/users/echarlie/events{/privacy}","received_events_url":"https://api.github.com/users/echarlie/received_events","type":"User","site_admin":false},"created_at":"2018-04-21T15:39:30Z","updated_at":"2018-04-21T15:39:30Z","author_association":"OWNER","body":"_From @matthazinski on October 2, 2016 20:18_\n\nRevised design per IRC discussion with @mutantmonkey :\n- Accessing trackman requires either LDAP auth (with user in fmdjs group) OR a guest login. Choosing the guest option requires the user to select/enter a reason for choosing this option, and emails a configurable list of people.\n- Once logged in (as LDAP or guest), the user can choose an arbitrary show in the shows list or create a new one, as was previously the case.\n- Store a list of LDAP accounts associated with a show and make these clearly visible to authenticated users. This would prevent users from using someone else's show. \n\nFuture enhancement ideas:\n- Allow non-guest login outside the internal address space\n- Store playlists online to allow users to queue up tracks before their show. These would likely need to be associated with a show rather than an LDAP account\n- Stricter ACLs and/or alerting for which LDAP users are allowed to choose which shows.\n"}}
{"actor":{"display_login":"echarlie"}}