Rights by role

[dcollie2]

Summary

There are only two roles for logged-in users: Administrators and Contributors. Users can be contributors for only one provider (the optional has-many relationship). Administrator status is a flag on a user. Technically, a user can be an administrator and be a contributor for a provider, but in a practical sense, they will just be an administrator.

Dependency

Users, sessions, and providers need to be in place before doing this.

Details

Criteria for Completion

• A user can be an admin.
• A user can belong to a provider.
• User add/edit UI offers a select list for easy association with a provider
• A user must either be an admin or belong to a provider.
• Only admins can access user management CRUD
• Only admins can manage languages
• Only admins can mange regions
• Only admins can manage providers
• Non-admin users can manage topics belonging to the user's provider