[Ssc-dev] Authentication, Authorization and Architecture

[Lee Azzarello]

Barbra and I met today about the problems we're facing with
authentication, authorization and architecture for the InformaCam
backend.

We decided to continue on two concurrent paths. She'll design both the
public and private APIs and I'll design the security using the APIs as
a black box.

Due to the potential complexity, specifically around authorization, I
would like to propose bringing in an advanced math/CS expert in
authorization rules for large scale distributed systems. Is this a
possibility? A candidate would be someone with complex transaction
processing experience in a distributed environment under the
constraints of hundreds of access rules.

Regards,
Lee