Enable apps to be team aware

[paltman]

On Team Aware Apps

With pinax-teams giving us a beachhead for team-based web applications, it is important for us to consider how to make our Django apps easily used within this team context. How do we make them team aware without sacrificing the loose coupling that makes Django apps so great?

I have some ideas specifically around the integration of pinax-wiki with teams that I'd like to explore and propose.

App Level Roles

It's easy to conflate team management roles with site-level and app-level roles. To be clear, the roles on the Membership model in pinax-teams is solely for the management of team membership.

To make pinax-teams extra powerful would be to be extensible so that if team aware apps were in INSTALLED_APPS, extra interface would appear on the team management page that allowed a Manager of the team to set the roles for the different apps that are installed.

Groups

We could have the following models added to pinax-teams:

Group:
    label

GroupRole:
    group
    label

GroupMembership:
    group
    team
    user
    role

In the initialization code for pinax-teams we can loop over the INSTALLED_APPS and import any groups.py module and execute an install() method if it exists. This will basically do get_or_create's on Group and GroupRole to install the data that this app will need.

The presence of these groups and inform the UI on the team management pages, perhaps tabs for each Group found, with the ability to add/edit/delete members from the different groups.

Hooksets

In each app that is going to be made team aware and is providing the contracted groups.py module and install() method, a default hookset will be defined so that default interpretation of security could be provided but also so that one could easily override this at the site level.