grow food, not lawn.

shop user roles: owners, editors, members

Russell Ballestrini requested to merge implement-shop-user-roles into master

shop user roles: owners, editors, members

Huge pull requests.

In this PR we implement role based authorization by extending the "user shop" table to include a new field for tracking a rudimentary role id integer.

For now the integers are from 0,1,2

  0 == owner (root)
  1 == editor (virtual assistant)
  2 == member (viewer)

For now the member role doesn't provide any additional behavior but could be added to a future enhancement.

We have now separated out privileged views into requiring the user to be part of the owner role or editor role depending on the view.

We have created a new route called shop_users & it works for adding or removing new users into the active shop. As such for example, only users with owner access may access the new shop_users view and as such only they can add or remove users from the shop.

Edited by Russell Ballestrini

Merge request reports