Define and implement most important privileges

[bajiat]

Define potential database privileges for Apinf user roles. Prioritize them and implement the most significant ones for MVP.

Definition of done

• Make a list of user privileges per user role
  • apiBackends collection
  • apiBookmarks collection
  • ElasticSearch analytics data
• Implement 3-5 most important database privileges.
  • user bookmarks publication
  • [x ] all analytics data query

[brylie]

I have created a document describing our system permissions.

[brylie]

I am working on this issue, starting with user bookmarks. I would like to work with a pair programming partner on the Elastic analytics query (filtering to a given UserID or API ID). There is also a proposed schema change to the apiBackends collection, which is modified in a pending pull-request.