Create Admin users with control over one or more facilities about open_pantry HOT 3 OPEN

Agreed re Ueberauth (not Guardian), another good reason for that bias.

For additional tiers of auth, that's fine but let's avoid too much scope creep here, we can add followup stories (or new stories to this epic), but let's try and keep the stories well scoped and small/iterative.

from open_pantry.

I think probably a few tiers of auth..

1. OP admin: (godlike control over all, though we probably do want to have action logging at some point. )
2. Site Admin: (Control over stock and users at specific locations could be granted this access to multiple locations or one)
3. Volunteer/Worker: Can enable a client/family size.
4. Client: Can make orders.

from open_pantry.

My understanding is that after enabling guardian it gets a lot easier to enable things like Google SSO which in the US is very useful since they give out free business accounts to non-profits and are thereby one of the favorite email suppliers for non-profits... makes it easy to enable permissions to people based on their agency.

from open_pantry.