rtheil / pseudo-md-doc-api Goto Github PK

Certain actions require being an administrator.

1. must be admin or same user as authenticated user to
   ---delete application
   ---update application
   ---get application by id
   ---get all applications
   ---get all applications for user

Secure the API with a key

applications controller doesn't return user information

API needs ability to reset a password

Test

Make it a separate table?

Need to make sure received date is set programmatically when new record is added

hash, salt, tokens, etc. should not be returned with an application

User:
-name (first/last)
-email address
-password (secure field)
-admin (bool)

1. Remove email address from user
2. Add backgroundCheck bool