mirror of
https://git.meshkee.com/Meshkee/backend.git
synced 2026-08-11 22:30:59 +04:30
Add business team access controls and customer role filters.
Super-admins can assign Admin; owners/admins manage Editor/Viewer via team/access, and the customers list supports all/customers/managers filtering. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
co-authored by
Cursor
parent
2c4d02bd0e
commit
e59db25814
@@ -369,11 +369,13 @@ Assigned via `business_users.role_id`:
|
||||
|
||||
| Role | Slug | Typical access |
|
||||
|------|------|----------------|
|
||||
| Owner | `isOwner=true` | All `business_owner` permissions |
|
||||
| Admin | `admin` | Full content + team read |
|
||||
| Editor | `editor` | Create/edit/publish content |
|
||||
| Owner | `isOwner=true` | All `business_owner` permissions (incl. full team manage for editor/viewer) |
|
||||
| Admin | `admin` | Full content + team manage for **non-admins**; only **super_admin** may assign this role |
|
||||
| Editor | `editor` | Create/edit/publish content (no team manage) |
|
||||
| Viewer | `viewer` | Read-only |
|
||||
|
||||
Super-admin Users (business filter) and business Customers: change access is **Customer** vs **Manager**, then Admin/Editor/Viewer (Admin option super-admin only). Business owners are locked. API: `PATCH /businesses/:businessId/team/access`.
|
||||
|
||||
### Permission groups (seeded)
|
||||
|
||||
`business.*`, `domains.*`, `products.*`, `blogs.*`, `portfolios.*`, `media.*`, `categories.*`, `users.*`, `roles.manage`, `business.team.*`, `business_categories.*`
|
||||
|
||||
Reference in New Issue
Block a user