backroad
backroad copied to clipboard
User role needs to be editable
Currently an admin
user is created when installing the application. And only admin
role users can manage users. But, there's no way for an admin
user to create another admin
user.
When creating a new user or editing a new user, there needs to be an option to select that user's role.
However, remember that while an editor
role user cannot manage users, they can edit their own profile information. The client-side application uses the same form component for this as when an admin
is managing users. So there needs to be a check here to not display that new role field.
Note that because this always planned to be an eventual feature, there's already a precaution on the server-side of things that doesn't allow a role
field value to get passed when updating a user, if the user is an editor
updating their own profile.