Privacy

[kazjote]

Now

There are no specs and no implemented restrictions on who can do what if it is for groups.

Expected

1. Define security rules which specify who can do what if it is for groups.
2. Provide specs and implementation

[wolfgangihloff]

Since we are shooting for a PoC right now, I would postpone this. The requirements are done though, but have not found their way into the google docs yet.