Record detection IP

[skanderm]

[paulcretu]

I think we should use this https://github.com/ajvondrak/remote_ip

Figuring out IPs from headers seems to be tricky

Also, (ideally) non-moderators shouldn't be getting IP address info in the gql request. I think this is the first time we've had to deal with this. Does ash have anything to handle access control and role-based authz?

[skanderm]

I think we should use this https://github.com/ajvondrak/remote_ip

Figuring out IPs from headers seems to be tricky

Also, (ideally) non-moderators shouldn't be getting IP address info in the gql request. I think this is the first time we've had to deal with this. Does ash have anything to handle access control and role-based authz?

Good points about both. We're now using remote_ip and authorizing access to source_ip.