taskcafe/internal/graph/schema/user.gql

extend type Mutation {
  createRefreshToken(input: NewRefreshToken!): RefreshToken!
  createUserAccount(input: NewUserAccount!):
    UserAccount! @hasRole(roles: [ADMIN], level: ORG, type: ORG)
  deleteUserAccount(input: DeleteUserAccount!):
    DeleteUserAccountPayload! @hasRole(roles: [ADMIN], level: ORG, type: ORG)

  logoutUser(input: LogoutUser!): Boolean!
  clearProfileAvatar:  UserAccount!

  updateUserPassword(input: UpdateUserPassword!): UpdateUserPasswordPayload!
  updateUserRole(input: UpdateUserRole!):
   UpdateUserRolePayload! @hasRole(roles: [ADMIN], level: ORG, type: ORG)
  updateUserInfo(input: UpdateUserInfo!):
    UpdateUserInfoPayload! @hasRole(roles: [ADMIN], level: ORG, type: ORG)
}

type UpdateUserInfoPayload {
  user: UserAccount!
}

input UpdateUserInfo {
  name: String!
  initials: String!
  email: String!
  bio: String!
}

input UpdateUserPassword {
  userID: UUID!
  password: String!
}

type UpdateUserPasswordPayload {
  ok: Boolean!
  user: UserAccount!
}

input UpdateUserRole {
  userID: UUID!
  roleCode: RoleCode!
}

type UpdateUserRolePayload {
  user: UserAccount!
}

input NewRefreshToken {
  userId: String!
}

input NewUserAccount {
  username: String!
  email: String!
  fullName: String!
  initials: String!
  password: String!
  roleCode: String!
}

input LogoutUser {
  userID: String!
}

input DeleteUserAccount {
  userID: UUID!
  newOwnerID: UUID
}

type DeleteUserAccountPayload {
  ok: Boolean!
  userAccount: UserAccount!
}
cleanup: refactor api architecture & add user roles 2020-07-05 01:02:57 +02:00			`extend type Mutation {`
			`createRefreshToken(input: NewRefreshToken!): RefreshToken!`
feat: enforce user roles enforces user admin role requirement for - creating / deleting / setting role for organization users - creating / deleting / setting role for project users - updating project name - deleting project hides action elements based on role for - admin console - team settings if team is only visible through project membership - add project tile if not team admin - project name text editor if not team / project admin - add redirect from team page if settings only visible through project membership - add redirect from admin console if not org admin role enforcement is handled on the api side through a custom GraphQL directive `hasRole`. on the client side, role information is fetched in the TopNavbar's `me` query and stored in the `UserContext`. there is a custom hook, `useCurrentUser`, that provides a user object with two functions, `isVisibile` & `isAdmin` which is used to check roles in order to render/hide relevant UI elements. 2020-08-01 03:01:14 +02:00			`createUserAccount(input: NewUserAccount!):`
			`UserAccount! @hasRole(roles: [ADMIN], level: ORG, type: ORG)`
			`deleteUserAccount(input: DeleteUserAccount!):`
			`DeleteUserAccountPayload! @hasRole(roles: [ADMIN], level: ORG, type: ORG)`

cleanup: refactor api architecture & add user roles 2020-07-05 01:02:57 +02:00			`logoutUser(input: LogoutUser!): Boolean!`
			`clearProfileAvatar: UserAccount!`
chore: project cleanup and bugfixes 2020-07-12 09:06:11 +02:00
feature: add web & migrate commands 2020-07-16 01:20:08 +02:00			`updateUserPassword(input: UpdateUserPassword!): UpdateUserPasswordPayload!`
feat: enforce user roles enforces user admin role requirement for - creating / deleting / setting role for organization users - creating / deleting / setting role for project users - updating project name - deleting project hides action elements based on role for - admin console - team settings if team is only visible through project membership - add project tile if not team admin - project name text editor if not team / project admin - add redirect from team page if settings only visible through project membership - add redirect from admin console if not org admin role enforcement is handled on the api side through a custom GraphQL directive `hasRole`. on the client side, role information is fetched in the TopNavbar's `me` query and stored in the `UserContext`. there is a custom hook, `useCurrentUser`, that provides a user object with two functions, `isVisibile` & `isAdmin` which is used to check roles in order to render/hide relevant UI elements. 2020-08-01 03:01:14 +02:00			`updateUserRole(input: UpdateUserRole!):`
			`UpdateUserRolePayload! @hasRole(roles: [ADMIN], level: ORG, type: ORG)`
feat: add user profile settings tab 2020-09-11 20:54:43 +02:00			`updateUserInfo(input: UpdateUserInfo!):`
			`UpdateUserInfoPayload! @hasRole(roles: [ADMIN], level: ORG, type: ORG)`
			`}`

			`type UpdateUserInfoPayload {`
			`user: UserAccount!`
			`}`

			`input UpdateUserInfo {`
			`name: String!`
			`initials: String!`
			`email: String!`
			`bio: String!`
chore: project cleanup and bugfixes 2020-07-12 09:06:11 +02:00			`}`

feature: add web & migrate commands 2020-07-16 01:20:08 +02:00			`input UpdateUserPassword {`
			`userID: UUID!`
			`password: String!`
			`}`

			`type UpdateUserPasswordPayload {`
			`ok: Boolean!`
			`user: UserAccount!`
			`}`

chore: project cleanup and bugfixes 2020-07-12 09:06:11 +02:00			`input UpdateUserRole {`
			`userID: UUID!`
			`roleCode: RoleCode!`
			`}`

			`type UpdateUserRolePayload {`
			`user: UserAccount!`
cleanup: refactor api architecture & add user roles 2020-07-05 01:02:57 +02:00			`}`

			`input NewRefreshToken {`
			`userId: String!`
			`}`

			`input NewUserAccount {`
			`username: String!`
			`email: String!`
			`fullName: String!`
			`initials: String!`
			`password: String!`
			`roleCode: String!`
			`}`

			`input LogoutUser {`
			`userID: String!`
			`}`

			`input DeleteUserAccount {`
			`userID: UUID!`
feature: fix user admin related bugs 2020-07-18 04:55:38 +02:00			`newOwnerID: UUID`
cleanup: refactor api architecture & add user roles 2020-07-05 01:02:57 +02:00			`}`

			`type DeleteUserAccountPayload {`
			`ok: Boolean!`
			`userAccount: UserAccount!`
			`}`