Sort out user authentication and permissions #10
Description
- Better define the user roles
- Secure controller actions based on roles
- We should be able to override the roles' permissions by saving individual permissions for users (eg: controller >> action >> read/write)
Consider using an ACL module:
- https://github.com/synapsestudios/kohana-acl
- https://github.com/Wouterrr/ACL (demo https://github.com/Wouterrr/A2ACLdemo)
- https://github.com/vendo/acl/ (Preferred due to its simplicity)