Access Control

[dasvas]

As an admin, I want to specify, what actions each role can perform, so that only authorized users can access the application and its features.

• [ ] Admin page is created.
• [ ] The role of economist is created.
• [ ] The role of gatekeeper is created.
• [ ] The role of admin is created.
• [ ] The role of guest is created.
• [ ] There is an option to select actions that can be performed by the roles.
• [ ] Action to enter/edit/delete value is allowed only for economists.
• [ ] Action to define KPIs is allowed only for gatekeepers.
• [ ] Users can be added by the admin.
• [ ] The role can be assigned to the user.
• [ ] Invitation email is sent to the new user upon assigning a role to them.

[maalej]

1. need a mock up for admin page
2. prepare a list of actions. We might need to change our DB design.
3. For authorization issues, we need to setup USER_ROLE into the whole app then we can add conditions about the rules