rework the whole permissions system to make it adaptable - Githubissues

modular-synthesizer / roadmap

A repository solely dedicated to issues to expose the features roadmap and the milestones

0 stars 0 forks source link

rework the whole permissions system to make it adaptable #8

Open vincentcourtois opened 1 year ago

vincentcourtois commented 1 year ago

Context

The permission system is currently binary, you are either administrator or not
We could have the need for more flexibility to give finer grained permissions for each feature
We currently cannot create, edit or delete groups or membership to groups

Notes

groups should be administrable, we must be able to create, update or delete them
membership to groups must be either granted or revoked
membership could be granted in bulk, and we should be able to add several users to a group
groups should have a collection of scopes that are used in the application to access routes or features

vincentcourtois commented 1 year ago

Step 1

[x] On the API, be able to manage groups and scopes with the current permissions state
[ ] [IN PROGRESS] On the frontend, add interfaces to manage groups and scopes as an administrator in the current permissions system

Step 2

[ ] On the API? add the list of scopes to the informations of the user
[ ] On the API, implement the scopes on the routes and check them on the requesting user
[ ] On the frontend, implement the scopes to display or hide features to users