Pulp

The user/auth system in 2.y has many opportunities for improvement. Porting it from mongodb to postgres might take about the same effort as standardizing on django's auth.

There are many advantages to using django's auth, including having less custom code, and being able to easily use complimentary apps like django-admin.

https://docs.djangoproject.com/es/1.9/topics/auth/

This task is to investigate django's auth, whether it meets our needs (it may need to be extended for path-based authz), and how it would affect current use cases. As a bonus, investigate how it could integrate with freeipa.