Create user roles

[bajiat]

Create user roles for API user, API administrator and system administrator and document their privileges

Definition of done

• Create roles corresponding to our Personas' user roles
• Create document describing roles and expected privileges
• Define user roles in code, possibly on Startup
• Decide how system administrators will manage user roles
• Add roles collection and field to user administration interface

[brylie]

@JuusoV, check out the following learning resources demonstrating the alanning:roles package:

• Adrian Lanning: Authorization with Meteor-Roles -- Devshop 5 Tech Talk
• Gentle Node Meteor #13: Managing User Roles

[brylie]

The alanning:roles API documentation indicates there is a createRole method. We may be able to create the roles on Meteor.startup() using Roles.createRole('role-name') one or more times.

[brylie]

It could also be possible to verify the roles before creating them, to avoid creating duplicates, by using the Roles.getAllRoles() method and checking each returned role for a duplicate.

We have a similar pattern for avoiding duplicates in the ApiBackends collection.

[brylie]

Also, refer to the Best Practices section of the roles demonstration video, where Adrian Lanning explains conventions for creating roles. This may influence how we implement roles in our project.

[JuusoV]

Roles.createRole('role-name') works under Meteor.startup(). The created roles shown in the console with Roles.getAllRoles().find().fetch()

[brylie]

@JuusoV please review the similar pattern for avoiding duplicates in the ApiUmbrellaAdmins collection. You will have to take the general pattern and modify it to work with your task.

[JuusoV]

I got the roles working but I think we should not impelement them in the startup because the roles are only created once. Do you agree?

[brylie]

Where should we implement them?

On 18 June 2015 17:02:00 EEST, Juuso Vallius notifications@github.com wrote:

I got the roles working but I think we should not impelement them in
the startup because the roles are only created once. Do you agree?

---

Reply to this email directly or view it on GitHub:
https://github.com/apinf/api-umbrella-dashboard/issues/105#issuecomment-113166154

Sent from my Android device with K-9 Mail. Please excuse my brevity.

[brylie]

@JuusoV consider the Add Roles Collection to Admin Dashboard. This is a simple and flexible recipe to add a 'Roles' button to the admin dashboard, where we can easily manage the Meteor.roles collection. It will satisfy the final step in this task.

[JuusoV]

Thanks for the help and support @brylie.
Task is now done and PR is created.
Estimate: 0