Organisation "proof of ownership"

[onbjerg]

In order to provide customisation features for organisations on Apiary, we need some way to prove that a specific account "owns" or "controls" an organisation.

This should be possible with the new Agent app.

Possible solution

Apiary would have a Registry contract somewhere that maps an organisation address to a list of "editor" addresses. In order to add an address to the list for your organisation you have to execute e.g. add(address editor) on this Registry contract.

Upon calling of this method, the contract will check if the caller is an Agent app and add the editor to the list of addresses for the kernel of the Agent app.

Apiary would periodically check for events (e.g. EditorAdded(address org, address editor)) on the Registry contract and give these addresses editing rights on Apiary to their respective organisations (see #17 for authentication).

Caveats: Right now it is only possible to use the Agent app using dao act in aragonCLI. Also, this approach requires organisations to have an Agent app.