...

This is Jim Wilson's idea on multi-tenant support in Score.

Terminology notes

• It’s It is debatable whether “multi-tenant” is appropriate to describe what we want to accomplish here.

• “Role” “role” is used as a critical feature of authorization. Perhaps “group” would be more appropriate, or at least natural, but “role” is what Auth0 provides out-of-the-box, so we’ll go with it.

• “access BIEs” refers to creating, editing, viewing, and expressing BIEs (anything with BIEs)

...

1. Score will use Auth0 for authentication and authorization.

   1. Out of the box, Auth0 supports

      1. Managing users

      2. Managing roles

      3. Managing user-role relationships

2. Only administrators may create manage business contexts in Score.

3. Each business context may have zero to many roles associated with it (managed only by administrators)

4. A user may only access BIEs associated with business contexts that are associated with one or of the user’s roles.