Security

  • Authentication must happen in keycloak
    • Decides who is member (only then you can create/edit any map)
    • Also used for discovering users
  • Security of data must happen in the backend or in Nextcloud (for files)
  • Any modifications of elements or maps must be marked by:
    • creation time (granularity in seconds)
    • creation id (person who created)
    • modification time (granularity in seconds)
    • modification id (person who modified)
  • Only owners or collaborators are allowed to manipulate maps