User Role Based Controls

[oddieis]

Scope & Context

We would like to request implementing role-based access controls in Twenty CRM.
The ticket is about restricting access to certain areas (like the admin section) and specific objects and records based on the user's role.

Current behavior

Currently, all users have the same level of access across the application.
There is no differentiation between roles, so sensitive areas like the admin panel and particular files are accessible to every user.

Expected behavior

Users should only be able to access areas and files permitted for their role.
For example, a standard user should not see the admin area or have access to files reserved for admin users.

Technical inputs

• Create a new permissions model that maps user roles to allowed actions and resource visibility.
• Refactor the routing and view components to enforce permission checks before rendering restricted areas.
• Update file access services to incorporate role-based access checks.
• Implement middleware for API endpoints to enforce these role-based restrictions.

[FelixMalfait]

Thanks for the suggestion. Closing in favor of #209 - @ijreilly and @Weiko working on it at the moment and a first basic version will be released end of March