feat(auth): add authorization roles #26

New issue

Closed

opened 2025-07-28 09:09:16 +00:00 by chartgerink · 1 comment

chartgerink commented

2025-07-28 09:09:16 +00:00

Owner

Currently, all users are considered equal on the service. This means that there is no option to provide separate actions, depending on the authorization of the user.

For example, an admin should have more permissions in terms of settings (OIDC setup).

This issue tracks the work of implementing authorization roles for the service. The actual authorization logic is tracked in #54.

Currently, all users are considered equal on the service. This means that there is no option to provide separate actions, depending on the authorization of the user. For example, an admin should have more permissions in terms of settings (OIDC setup). This issue tracks the work of implementing authorization roles for the service. The actual authorization logic is tracked in #54.

chartgerink referenced this issue

2025-08-11 13:36:31 +00:00

feat(auth): implement and verify authorization for all endpoints #54

chartgerink commented

2025-08-12 09:22:40 +00:00

Author

Owner

After looking at Mastodon, Lemmy, and Pixelfed, I suggest we take the following global roles to not overcomplicate it:

Regular
Moderator
Administrator

Previously, in v1.0, we had:

Superadmin
Supporting
Customer

Supporting and customer are dropped for v2, as these are not going to be catered to. Individual supporting memberships will have to be managed someway, but not here.

After looking at Mastodon, Lemmy, and Pixelfed, I suggest we take the following global roles to not overcomplicate it: - Regular - Moderator - Administrator Previously, [in v1.0](https://github.com/libscie/ResearchEquals.com/blob/1dde1cda21dde583b083262f48ec3b1888b679b5/db/schema.prisma#L179C1-L183C2), we had: - Superadmin - Supporting - Customer Supporting and customer are dropped for v2, as these are not going to be catered to. Individual supporting memberships will have to be managed someway, but not here.

chartgerink referenced this issue from a pull request that will close it,

2025-08-12 11:13:38 +00:00

feat(auth): add authorization roles #61

chartgerink closed this issue

2025-08-12 11:13:42 +00:00

chartgerink referenced this issue from a commit

2025-08-12 11:13:43 +00:00

feat(auth): add authorization roles (#61)