Permissions model

When it comes to data security, there are usually several tiers. Of course, one wants to secure where the data lives and the transmission of that data; however, most enterprise apps need some level of data permissions as well, that is, certain users should only be able to see certain data or certain users should only be permitted to do certain manipulations.

Tasker's permissions model is inherently simple: every person is a user of the system, and every user can create tasks. Tasks can only be modified by their owner. Users can also manage other users, meaning that users can assign tasks to their subordinates. When a task is assigned to another individual, the assignee can update certain fields, namely progress and status. Both the owner and assignee can add comments to a task.

Of course, this doesn't cover the authentication and authorization or user administration mechanism, and that's by design. Many enterprises will have their own requirements when it...