Skip to content

Permissions and test accounts

Getting permissions right is a constant battle. The first stage should be to define "what we intend" here. Then it sbhould be fairly mechanical task to get them right on any view, and to assert this with tests.

In general each URL o rview should end up with a test that asserts that (a) it works for the right kind of user, and (b) it's blocked for the wrong kind of user.

We can assign permissions with two techniques: Django's groups, or our own roles and officials. Groups work fine for very specific functions. roles are for when we want to grant access to a specific athletics organisation or competition.

Groups

Group Name Meaning Example Can Access
admin_euroath Access to European Athletics functions Quentin Pirlet All euroath site functions)
compliance Access to approve Euro compliance reports (since 2018);
slightly broader group of people		 Jose Luis de Carlos
Alfons Juck
admin_nor National Federation Admin Roar Holen Create competitions in their country
Approve permit applications in their country
admin_gbr_thh Organisation admin (legacy, also used by fed admins but we want to migrate them to the above. Should be handled by Roles in future) Create competitions organised by them
Invite officials
Set org profile
treasurer_thh Treasurer for org See here at top Treasurers page
Download payments
in future, refund people

For specific applications, we could do a better matrix with all appropriate views on one axis (down the page?) and the relevant groups on the other (across the top?).

Estonia Club Admin

There is an existing account for Club Administration. This account is under Club Administration. This account is usable on both the live and test servers, Though it is highly recommended that you stick with the test server https://test-estonia.opentrack.run/ to test licence renewals, etc.

1. Testing Club Administration (Club ALEM)

  • Username/Email: estonia_club_test
  • Password: clu8_1es1

This account can:

  • Initiate requests for licence renewel,
  • Cancel a request for a licence renewel,
  • Add a member to the Club,
  • Edit member personal details

Estonia Federation Admin

There is an existing test account for National Federation Administration. This account is under Estonia Federation Administration. This account is usable on both the live and test servers, Though it is highly recommended that you stick with the test server https://test-estonia.opentrack.run/ to test licence renewals, etc.

2. Testing Estonia Federation Administration

  • Username/Email: estonia_fed_test
  • Password: f4d_1es1

This account can:

  • Authorise or decline the renewal of a licence.
  • Edit member personal details.
  • Edit coaching information (link/unlink athlete to coach)

European Athletics Admin

There is an existing test account for European Athletics Administration. This account is under European Athletics Administration. This account is usable on both the live and test servers, Though it is highly recommended that you stick with the test server https://test-euroath.opentrack.run/.

3. Testing European Athletics Administration

  • Username/Email: euroath_test
  • Password: run

This account can:

  • Create or edit competitions in Europe.
  • Edit and review permit applications for European Athletics permit meetings.
  • Edit and review compliance reports for European Athletics permit meetings.
  • Invite or remove officials from the European National Member Federation groups.