Add the ability to add new user roles (authorities) through the API itself about mf-rest-api HOT 1 OPEN

Currently, adding new roles is indeed not possible and that is a great suggestion for an enhancement. It is however possible to change the linked (default) whitelists. So just in case, that this could already resolve an issue that you might have run into:

The role "ROLE_USER" is only linked to the "DEFAULT_READ_WHITELIST". The role "ROLE_MEMBER" and "ROLE_ADMIN" are additionally linked to "DEFAULT_WRITE_WHITELIST" and "ROLE_ADMIN" is furthermore linked to the "DEFAULT_ADMIN_WHITELIST". By using "linkFunctionToWhitelist" and "unlinkFunctionFromWhitelist" you can customize the available functions for each role by customizing the corresponding whitelist. Furthermore you can create new whitelists by calling "createWhitelist" and assign them to certain users via "linkUserToWhitelist".

If you simply want to change the role of a user from one default role to another, then you can call "setRole".

And maybe you can already tackle the issue "[...] also make sure that the UI does not even attempt to give the user the impression that specific actions are possible." by calling "getUserInfo". There you receive a list of all allowed function calls for the specified user.

So maybe this was already helpful. But enhancing the role system is a good idea in my eyes. 👍

from mf-rest-api.