Pub membership

[gabestein]

Motivation

• So admins can assign Members to individual pubs
• So admins can create reviews of pubs as children or siblings that their submitters, as contributors, can't see (relies on conceit that any form/editor that creates children will add the creator as admins of those child pubs -- seems reasonable?)
• So admins can assign editors who are responsible for managing pubs and their children without giving them deletion permissions

Requirements

• UI for community admins and editors to add an existing community member to a Pub as a contributor, editor, or admin
  • Admins should show as inherited from community admins, similar to V6
  • Permission level selection interface should have some indication of what permissions they grant for the stage
• Permissions behavior:
  • Contributor:
    • Can see and edit pub fields
    • Can see what stage a pub is in
    • Can create child/related Pubs (they become direct members of these pubs)
    • Cannot take actions, move, or assign
  • Editor: same as contributor, plus:
    • Can see and children and siblings (even if not directly added)
    • Can move, assign, and run actions on pubs (even if they're not stage members)
  • Admin: same as editor, plus:
    • Can delete the pub
    • Can add members to the pub as contributor, editor, or community admin. (If the user does not exist, admin can invite them via email. The user receives an invitation to join PubPub as a result, with a message specifying the stage they have been invited to and a redirect to the stage configuration they have been added to.)
• Email behavior
  • When a user is added to a pub from the UI, they receive an email notifying them that they have been added to that pub, with a link to visit it.

Acceptance Criteria

[gabestein]

One immediate open Q: anyone have strong feelings on whether we should allow editors to add existing members to pubs? Can go either way here.

[3mcd]

This all seems right to me, but I had one thought: what about adding fields to and removing fields from a pub via the UI (i.e. not via actions; including relationships)? Maybe we should restrict these types of edits to editor+. It seems potentially too permissive for a contributor to add/remove fields.

Also w.r.t your open question about adding existing members to pubs, I kind of think it should be granted by an admin membership/permission. For no other reason than it just feeling more intuitive to me...