Access for non-HGF organisations

User story

As a user from a Connected Organisations (via eduGAIN) I would like to be able to log in to the RSD so that p.ex. I can be invited/create software entries.

Implementation

• Classification of organisations
  • HGF organisation (everything allowed)
  • eduGAIN connected organisations
    • Official partnering organisation (everything allowed, e.g. DKRZ)
    • Other organisation (must be invited to maintain, cannot create software/projects/organisations)
• Organisation must be determined by email scope

Notes

• if we regularly allow login by official partnering organisations: do we want to enforce that at least one HGF organisation must be a "Related Organisation"?
  • yes, see #137

Requires

• #137
• project-management#27

Links

• Helmholtz AAI: Authorising users for access to a service
  • OIDC Attributes in Helmholtz AAI
  • List of Connected Organisations
• Nimbus OAuth 2.0 SDK with OpenID Connect 1.0 extensions
  • Class UserInfo