Organization access #32
Reference in New Issue
Block a user
Delete Branch "organization-access"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Handle organization access for users based on organization roles
https://app.asana.com/0/697944902557002/838943199344906
Preparation:
Execute
composer installandcomposer update-dbDeclare new enviroment variable:
WIAAS_CUSTOMER_INTERFACEwhich should be url to frontend interface.Unit test:
Execute unit test and check if all passed
Smoke test:
Login to backend site
Create few organizations with multiple roles
Create users and assign them to organizations.
Notice that on user table list roles that are listed for users are actually roles of organization.
Select one of the users for login
Try logging in with role that is not assigned to the organization
Notice that login error is generated
Try logging in as customer to backend when you organization has customer role assigned to it
(add this value to the form by yourself sine it is not listed by default)
Notice that error message is generated
Try logging in with some other role that is assigned to your organization
Notice that login was succesfull
After logging in to dashboard notice dropdown next to profile section in admin bar
Dropdown should contain all roles for you organizations.
Try switching roles and notice view is changed (ex. Suppliers cannot see Products tab or Documents tab)
Notice that clicking on
Customerrole leads you to frontend interface.Login to frontend interface and confirm that access to rest API works as before.
changed the description
mentioned in merge request !33
changed the description
added 1 commit
17acc9d9- Error proof creating suppliers link to organizationCompare with previous version
added 24 commits
masterbd724d12- Merge branch 'master' into organization-accessCompare with previous version
merged
mentioned in commit
8789eb1426