ACL - Enhance Admin/SuperAdmin/User permissions

hurricane-response / florence-api

Fork of https://github.com/sketch-city/harvey-api for Hurricane Florence

https://hurricane-florence-api.herokuapp.com/

GNU General Public License v3.0

50 stars 14 forks source link

ACL - Enhance Admin/SuperAdmin/User permissions #89

Open miklb opened 5 years ago

miklb commented 5 years ago

After a discussion tonight at Code for Tampa Bay meetup wanted to document a thought.

I don't have a specific use case in mind, but I know it's been discussed in the past as well. We should document the current way updates are approved. I'm not 100% sure the system now. My recollection is shelter updates were in real time between a super admin and other volunteers where a quick level of trust was built. Insert something about scale here.

omnilord commented 5 years ago

Yeah, there are three types of users:

anonymous (haven't signed in)
user (has signed in)
admin (user where the admin flag = true).

Draft changes can be created by users, but an admin must approve it. Admin users create a draft, but auto-approve it immediately. Drafts are a record of history for each record. In theory we could setup a view that allows a user to restore a previous draft version.