Users GraphQL api authorisation

distributeaid / toolbox

DistributeAid Toolbox

http://distributeaid.org

GNU Affero General Public License v3.0

3 stars 1 forks source link

Closed pedro-gutierrez closed 3 years ago

pedro-gutierrez commented 3 years ago

This PR implements simple authorisation and access control in GraphQL user apis.

DistributeAid Admins have read/write full access to all user accounts in all groups.
Group admins only have read/write access to users accounts within the group.

Fixes #103