Xazin
commented
2 years ago How do you want to go about inviting and revoking admin access?
Ideally, we should have 3 groups:
- user
- admin
- super admin
Super Admin can invite and revoke admin access (Removes their ACP rights, but they're still users)
By that definition we should have some kind of endpoint to manage admins:
/cms/administrators:
- POST: Invites administrator by email
- DELETE: Revokes administrator rights (If not super admin)
- GET: Gets a list of all administrators (email, display name, phone number, role) Opinion?
We also need to get their role by authentication
rubenhorn
Preview new API here.
closes #67