Set role permissions - Githubissues

FIS2425 / authorization-svc

Authorization microservice for medical consultation application. Handles the authorization of users for the entire application

Apache License 2.0

0 stars 0 forks source link

Set role permissions #41

Closed alvgonfri closed 5 days ago

alvgonfri commented 1 week ago

Feature Description

We need to establish what permissions some roles have over others:

Admin: get, create, edit, delete --> ClinicAdmin, Doctor, Patient; get, changePassword--> himself.
ClinicAdmin: get, create, edit, delete --> Doctor, Patient; get, changePassword--> himself.
Doctor: get --> Patient; get, changePassword--> himself.
Patient: get, changePassword--> himself.

Definition of Done

[x] Store these permissions in the Roles database collection.
[x] Add a populate script for the Roles collection.
[x] Create a middleware that verifies the permissions calling the collection.
[x] Eliminate deprecated middlewares.
[x] Update tests.
[x] #46