Roles

KIO user roles. A role groups permissions; every KIO user has exactly one role.

Concepts

Slug: generated from slug when sent, otherwise from name, and regenerated on every update.

Permissions: a role holds permission IDs. Updating a role replaces its whole permission list.

Audit log: creating, updating or deleting a role records the added and removed permissions, and who made the change, in the permissions log.

Deleting a role does not reassign its users; they keep the dangling role ID.

GET /v1/roles

Every role, with its permission IDs.

POST /v1/roles

Creates a role.

GET /v1/roles/{id}

Returns a single role.

PATCH /v1/roles/{id}

Updates a role's name, slug and permissions.

DELETE /v1/roles/{id}

Deletes a role.

Router: routes/v1/users.js

Controllers: controllers/users/users-roles.js

Models: models/user_role.js, models/log_permissions.js

Service: services/logs.js