#1 Permissions

[howanu]

In version 0.4, permissions look like:

The permission groups are:

recipient, non-recipient, admin

On Gifts:
D: No one can delete (admin deletes files)
A: Anyone can create for anyone else
R: Anyone can read, but the recipient can't read
claimed status
M: Only the recipient can modify
P: No one can change permissions

On People:
D,A,M,P: only the admin can delete, add, and modify;
permissions are not changeable.
R: Everyone can see everyone else, although there is no
personal information to see, just gifts.

For version 1.0, here's a first stab:

The permission groups are:

recipient, author, claimer, admin, guest, other

On Gifts:
D: Logical deletion only. Admin and recipient can
delete.
A: Anyone can add
R: Each gift has readability set by the author and
admin. Claimed status is also set by the author, but
recipient never gets read permission on the claimed
status.
M: Anyone can modify a gift; modifications are tracked.
P: The admin can change permissions

On People:
D: The admin can logically delete people
A: The admin can add people. THe admin should be able
to set up a URL that will let someone sign themselves
up.
R: Everyone can read everyone else's profile.
M: Anyone can modify their own profile. An admin can
modify their subjects' profiles.
P The admin can give someone admin priviledges for
other specific people, e.g. give a facther admin
priviledges for his kids.