IP white-/black-list permissions

[gavin-norman-sociomantic]

From #67 (comment):

Another aspect which was discussed: it'd be nice to also have permissions based on an ip white/black list. For example, instances of apps running on a test server should be allowed to read from but not write to live nodes. They will likely user the same auth key as the real apps, but can be distinguished by their ip.

[nemanja-boric-sociomantic]

They will likely user the same auth key as the real apps, but can be distinguished by their ip.

I think this is the problem here. Is there any reason for them to use the same credentials?

[gavin-norman-sociomantic]

Hahaha, damn, this is actually a case for a more advanced permissions system. (We discounted this idea recently, as we didn't have any real use cases for it.)

Is there any reason for them to use the same credentials?

Not strictly, but I imagine developers would end up just setting it up like that for convenience.