Differentiate role and user - Githubissues

oursky / skygear-rbac

A generic role base access control with resource policy, designed to work with skygear-auth

0 stars 2 forks source link

Differentiate role and user #16

Closed IniZio closed 5 years ago

IniZio commented 5 years ago

refs: oursky/skygear-rbac#17

Since we need to differentiate user and role even in generic cases:

[x] Add role to role group with /{domain}/role
[x] Add handler to list users with /{domain}/role/{id}/user (o i already implemented it..)
[x] Add condition to disallow assigning role to subject in urls like /{domain}/subject/{id}/role/ if role is not registered in /{domain}/role