Fully implement user permissions using regions so that any given user can be assigned to different regions and implicitly be allowed to manage all users, venues, events, and subregions within that region.
Still requires a little bit of work to properly restrict Venue, Manager, and Region creation interface to the regions that a user is allowed to manage.
Might also require some better code for restricting the venue list to only venues that a user can modify.
I suggest you review these PRs in the following order.
Fully implement user permissions using regions so that any given user can be assigned to different regions and implicitly be allowed to manage all users, venues, events, and subregions within that region.
Still requires a little bit of work to properly restrict Venue, Manager, and Region creation interface to the regions that a user is allowed to manage.
Might also require some better code for restricting the venue list to only venues that a user can modify.
I suggest you review these PRs in the following order.
15 Authentication
17 Regions
18 Permissions