Add Authentication with credentials and rights

[orenault]

Is it possible to add Authentication and rights management ?

Maybe as it's done in Jenkins, with a matrix of rights/users.
And the ability to connect to a ldap.

This should be disable by default (everybody can do anything... create, delete...).

Thanks
Olivier

[kinow]

Great idea mimicking Jenkins auth default settings. There is already a users table, but it has been disabled to speed up initial development. We'll try to use them and add a basic auth feature.

[kinow]

Now we have users. I will study how permissions are implemented in Jenkins and TestLink. And then will study how Sentry (PHP library) implements permissions too, and will try to find a compromise for us. At the moment the strategy used is Logged in users can do everything, but we'll enhance that in the future.

[kinow]

Users table created, populated with examples, tested. API providing right methods for adding, logging in, logging out, and editing users.

Will leave the issue open to discuss and implement the permissions, groups or other schema for deciding which users have permissions to what parts of the system.