Authentication

[Michael-Longley]

User Story

As a mentor and the mentoring head I want to make sure that only mentors have access to the tool to ensure the highest quality questions are used for the exams.

Acceptance Criteria

• As a normal @rit.edu account the tool should display a message that the permissions are incorrect
• As a mentor @rit.edu account the tool should allow the user to create new questions
• As the mentoring head @rit.edu account the tool should allow the creation of exams

Question

• Should any mentor be able to approve exam questions or just a sub group of "senior" mentors?
  @lindseyferretti

Dependencies

• Create a database #4

[wylaris]

Idea: Potentially using Google OAuth2, limiting the domain to rit.edu, and adding an extra step in the authentication flow to check against a whitelist (table in our DB). This would allow us to have our own separate authentication system from the SSE that avoids having any dependency on that shit show of a product.