Snipshare
This project contains all the necessary boilerplate to setup a multi-tenant SaaS with Next.js including authentication and RBAC authorization.
Features
Authentication
- [ ] It should be able to authenticate using email & password;
- [ ] It should be able to authenticate using Github account;
- [ ] It should be able to recover password using email;
- [x] It should be able to create an account (email, name and password);
Organizations
- [ ] It should be able to create a new organization;
- [ ] It should be able to get organizations to which the user belongs;
- [ ] It should be able to update an organization;
- [ ] It should be able to shutdown an organization;
- [ ] It should be able to transfer organization ownership;
Invites
- [ ] It should be able to invite a new member (email, role);
- [ ] It should be able to accept an invite;
- [ ] It should be able to revoke a pending invite;
Members
- [ ] It should be able to get organization members;
- [ ] It should be able to update a member role;
Projects
- [ ] It should be able to get projects within a organization;
- [ ] It should be able to create a new project (name, url, description);
- [ ] It should be able to update a project (name, url, description);
- [ ] It should be able to delete a project;
Billing
- [ ] It should be able to get billing details for organization ($20 per project / $10 per member excluding billing role);
RBAC
Roles & permissions.
Roles
- Owner (count as administrator)
- Administrator
- Member
- Billing (one per organization)
- Anonymous
Permissions table
|
Administrator |
Member |
Billing |
Anonymous |
| Update organization |
✅ |
❌ |
❌ |
❌ |
| Delete organization |
✅ |
❌ |
❌ |
❌ |
| Invite a member |
✅ |
❌ |
❌ |
❌ |
| Revoke an invite |
✅ |
❌ |
❌ |
❌ |
| List members |
✅ |
✅ |
✅ |
❌ |
| Transfer ownership |
⚠️ |
❌ |
❌ |
❌ |
| Update member role |
✅ |
❌ |
❌ |
❌ |
| Delete member |
✅ |
⚠️ |
❌ |
❌ |
| List projects |
✅ |
✅ |
✅ |
❌ |
| Create a new project |
✅ |
✅ |
❌ |
❌ |
| Update a project |
✅ |
⚠️ |
❌ |
❌ |
| Delete a project |
✅ |
⚠️ |
❌ |
❌ |
| Get billing details |
✅ |
❌ |
✅ |
❌ |
| Export billing details |
✅ |
❌ |
✅ |
❌ |
✅ = allowed
❌ = not allowed
⚠️ = allowed w/ conditions
Conditions
- Only owners may transfer organization ownership;
- Only administrators and project authors may update/delete the project;
- Members can leave their own organization;