Merge branch 'bnewbold-crude-auth'

Fixed a conflict in:
  python/fatcat_export.py

1 files changed, 12 insertions, 3 deletions

diff --git a/TODO b/TODO
index 7692444b..ccd44d21 100644
--- a/TODO
+++ b/TODO
@@ -3,21 +3,29 @@
 
 ## Next Up
 
-- fileset/webcapture entities
-- authentication
+- pg_tmp for rust tests
+- cargo update (rust deps)
+- rust to 2018 version
+- guide updates for auth
+- pipenv update; and maybe pin some versions (python deps)
 - remove the concept of "active editgroup", and simplify autoaccept batch path
+- refactor webface views to use shared entity_view.html template
 - fix returned error messages; should return type (shortname), and then actual
   message/description
-- handle wip entities in web UI
+- handle 'wip' status entities in web UI
 - elastic inserter should handle deletions and redirects; if state isn't
   active, delete the document
     => don't delete, just store state. but need to "blank" redirects and WIP so
        they don't show up in results
     => refactor inserter to be a class (eg, for command line use)
     => end-to-end test of this behavior?
+- un-accepted editgroup access: by created/updated, accepted/not
 
 ## Ideas
 
+- more logins: orcid, wikimedia
+- `fatcat-auth` tool should support more caveats, both when generating new or
+  mutating existing tokens
 - fast path to skip recursive redirect checks for bulk inserts
 - when getting "wip" entities, require a parameter ("allow_wip"), else get a
   404
@@ -35,6 +43,7 @@
 
 ## Production blockers
 
+- privacy policy, and link from: create account, create edit
 - refactors and correctness in rust/TODO
 - importers have editor accounts and include editgroup metadata
 - crossref importer sets release_type as "stub" when appropriate