System wide user management

[magyarosibotond]

With the current setup user and resource management can get out of hand by letting anyone sign up and create projects. Disabling registration will also forbid new users to join.
Another issue I have is to list all users and projects created on the platform.

A solution would be to introduce global user and role management:

• member: see own and participating projects
• admin: see all projects
• superadmin: see and manage users.
  Roles and permissions should be clarified.

While the global user management might be a good idea for the self-hosted it might not suite the cloud version.

To better suite the cloud version the concept of teams could be a good idea and have the same user management mentioned above.

One other alternative would be to keep the current user model and create a invitations table to store non registered email addresses when added to a project.
A new user should be able to accept invites via email and see all pending invites when signed up.

I'd be more than happy to help!

[magyarosibotond]

@anthonynsimon What would be the correct approach to follow the vision of the project?

[anthonynsimon]

@magyarosibotond I can definitely see how this would be useful. Right now it is possible to disable new users from signing up, but it requires a bit of configuration on deployment, instead of just "flipping a switch" on an admin panel, which would be a lot easier for existing deployments.

As to balance simplicity for now, I would say that having an invitations table per project, to allow for non-registered users to sign up would be the way to go. This would fit well together with the existing per project teams and roles.

Having some sort of superadmin with a management dashboard, would also definitely be useful, but we would need to really dig in deeper to see how it would best integrate with the rest of the features. I would suggest we keep this as an open topic until at least the next two major features are available: client libraries and automatic translations.

[anthonynsimon]

Quick update: the invite-only feature which is partly discussed here, has been available since 0.13.0

#66

It probably still makes sense to have a superadmin which can see all users on the platform, and can grant/disable access if needed.