gilcrest / diygoapi

A Go RESTful API template
MIT License
538 stars 67 forks source link

On user creation, grant users movieAdmin role #164

Closed gilcrest closed 1 year ago

gilcrest commented 1 year ago

RBAC is a very complicated subject. To keep things relatively simple, every user created through the /api/v1/users POST service will be granted the movieAdmin role in order to be able to create, read, update and delete movies through the API. The genesis user will be the only user granted the sysAdmin role which can call any service.