h0ngcha0
commented
9 years ago there r two roles: user and admin.
there is a little hack in the code that if we create a user called "admin", it will automatically get the admin role.
In the future admin user should be able to manage other users as well, e.g. revoke other users, grant other users admin privilege, etc. Should probably do in in the 2nd milestone.
We need to have different user roles hence different authorisations.
e.g. An admin have access to admin pages (provision new tshirt types, handle matured campaigns, etc) while the normal users can only manage their own orders and campaigns.