Basic user role CRUD #6

Open
opened 2025-11-18 08:32:53 -06:00 by digimint · 0 comments
Owner
  • A user should be able to create a new role for any user (hereafter referred to as 'the subject user') for which they have the EDIT_ROLES permission
  • A user should be able to edit the names of any of the subject user's roles with lower priority than their own if they have the EDIT_ROLES permission
  • A user should be able to allow, deny, or clear any permission they have for any of the subject user's role with lower priority than their own if they also have the EDIT_ROLES permission
  • A user should be able to re-prioritize any of the subject user's roles with lower priority than their own if they have the EDIT_ROLES permission
  • A user should be able to add or remove any of the subject user's roles with lower priority than their own to other users if they have the EDIT_ROLES permission
  • A user should be able to delete any of the subject user's roles with lower priority than their own if they have the EDIT_ROLES permission

Caveats

  • A user should not be able to remove a role from themselves or remove permissions from a role if it would result in no user having ADMINISTRATE permissions on the subject user.
  • If the only user with ADMINISTRATE permission on a subject user disconnects from that user, then ADMINISTRATE permission should automatically fall back to the subject user.
- [ ] A user should be able to create a new role for any user (hereafter referred to as 'the subject user') for which they have the `EDIT_ROLES` permission - [ ] A user should be able to edit the names of any of the subject user's roles with lower priority than their own if they have the `EDIT_ROLES` permission - [ ] A user should be able to allow, deny, or clear any permission they have for any of the subject user's role with lower priority than their own if they also have the `EDIT_ROLES` permission - [ ] A user should be able to re-prioritize any of the subject user's roles with lower priority than their own if they have the `EDIT_ROLES` permission - [ ] A user should be able to add or remove any of the subject user's roles with lower priority than their own to other users if they have the `EDIT_ROLES` permission - [ ] A user should be able to delete any of the subject user's roles with lower priority than their own if they have the `EDIT_ROLES` permission ## Caveats - [ ] A user **should not** be able to remove a role from themselves or remove permissions from a role if it would result in no user having `ADMINISTRATE` permissions on the subject user. - [ ] If the only user with `ADMINISTRATE` permission on a subject user disconnects from that user, then `ADMINISTRATE` permission should automatically fall back to the subject user.
digimint added this to the Taskflower v0.1.0 project 2025-11-18 08:32:53 -06:00
Sign in to join this conversation.
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: digimint/taskflower#6
No description provided.