paperhive / mongoose-authorize Goto Github PK

See https://github.com/lodash/lodash/wiki/Changelog#compatibility-warnings

Maybe the cause for the randomly failing tests on travis is that the mongodb indexes are created in the background. Since the models+indexes are recreated for every single test, it's likely that the lookup by id fails if it's issued directly after insertion.

Possible solution: disable background indexes for the tests.

Team members can be users (accounts) and teams. This is to allow the admin team of an article to contain the editors team for an organization, for example. However, teams in teams can create ugly loops in team structures, and we need some way to preven this.

One possibility to tackle this on a fundamental level is to discriminate between ordinary teams (with only users as members) and article teams ("roles") with ordinary teams and users as members. Article teams cannot be members of ordinary teams.

Another way would be to introduce some sort of safeguard when resolving team structures.

mongoose 4.0 has been released last week \o/

Usually, referenced documents have to be populated manually, so cycles should not be possible. To be on the safe side, cycles should nevertheless be detected. Thx @shdev for pointing this out!

This can be implemented similar to the teamPlugin cycle detection (cf. visitedTeams).