{"issue":{"created_at":"2011-11-10T19:55:24Z","state":"open","updated_at":"2011-12-09T20:39:57Z","comments":18,"user":{"gravatar_id":"06b29370cfbe838c3ed487118738d24e","id":53091,"url":"https://api.github.com/users/mhrivnak","avatar_url":"https://secure.gravatar.com/avatar/06b29370cfbe838c3ed487118738d24e?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"mhrivnak"},"body":"We need a new role for the authorizer.  The general idea is that a user in this role should be able to do anything a super admin can do, but only within their own organization.\r\n\r\nThe test for having this role is: does the user have the \"Administrator\" OrgRole within the organization in question?\r\n\r\nPrivileges this role should definitely have:\r\n\r\n* create and edit users within the org\r\n* bulk-upload users via CSV\r\n* change status of users in the org\r\n* enroll users in events\r\n* edit enrollment status\r\n* create and edit events, exams, FileDownload, FileUpload tasks.\r\n* view venue schedules\r\n* view resource schedules\r\n* assign users to tasks\r\n* create CurriculumEnrollments\r\n* create credentials and achievements\r\n* grand credentials\r\n\r\nand perhaps some more things that we will identify as we go, but this is a good start.","assignee":{"gravatar_id":"c257c0d93e4e2f23e71f624083dc7978","id":438552,"url":"https://api.github.com/users/jc0n","avatar_url":"https://secure.gravatar.com/avatar/c257c0d93e4e2f23e71f624083dc7978?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","login":"jc0n"},"id":2201953,"pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"labels":[{"name":"behavior","color":"2B60DE","url":"https://api.github.com/repos/TireSwingSoftware/openassign-server/labels/behavior"}],"number":39,"title":"Add Organization Admin Role","html_url":"https://github.com/TireSwingSoftware/openassign-server/issues/39","closed_at":null,"url":"https://api.github.com/repos/TireSwingSoftware/openassign-server/issues/39","milestone":null},"action":"reopened"}