Add business team access controls and customer role filters.

Super-admins can assign Admin; owners/admins manage Editor/Viewer via team/access, and the customers list supports all/customers/managers filtering.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
Alireza Hassani
2026-08-10 21:31:28 +03:30
co-authored by Cursor
parent 2c4d02bd0e
commit e59db25814
8 changed files with 334 additions and 12 deletions
+5 -3
View File
@@ -369,11 +369,13 @@ Assigned via `business_users.role_id`:
| Role | Slug | Typical access |
|------|------|----------------|
| Owner | `isOwner=true` | All `business_owner` permissions |
| Admin | `admin` | Full content + team read |
| Editor | `editor` | Create/edit/publish content |
| Owner | `isOwner=true` | All `business_owner` permissions (incl. full team manage for editor/viewer) |
| Admin | `admin` | Full content + team manage for **non-admins**; only **super_admin** may assign this role |
| Editor | `editor` | Create/edit/publish content (no team manage) |
| Viewer | `viewer` | Read-only |
Super-admin Users (business filter) and business Customers: change access is **Customer** vs **Manager**, then Admin/Editor/Viewer (Admin option super-admin only). Business owners are locked. API: `PATCH /businesses/:businessId/team/access`.
### Permission groups (seeded)
`business.*`, `domains.*`, `products.*`, `blogs.*`, `portfolios.*`, `media.*`, `categories.*`, `users.*`, `roles.manage`, `business.team.*`, `business_categories.*`