Add :app_id to people_roles + allow people to grant any role for their app(s)

[nelsonic]

At present only superadmin (person.id == 1) can grant roles to people.

auth/lib/auth_web/controllers/role_controller.ex

Lines 141 to 155 in 23df807

	def grant(conn, params) do
	# confirm that the granter is either superadmin (conn.assigns.person.id == 1)
	# or has an "admin" role (1 || 2)
	granter_id = conn.assigns.person.id
	# we need to expand grant priviledges see: https://github.com/dwyl/auth/issues/119
	if granter_id == 1 do
	role_id = map_get(params, "role_id")
	person_id = map_get(params, "person_id")
	Auth.PeopleRoles.insert(granter_id, person_id, role_id)
	redirect(conn, to: Routes.people_path(conn, :show, person_id))
	else
	AuthWeb.AuthController.unauthorized(conn)
	end
	end

We obviously need the ability for people who own an app to be able to grant the role that they created to any person who has authenticated with their app ...

Todo

• Add :app_id to people_roles schema.
• Restrict granting a role to the person that owns the App.
  • Any person should be able to grant one of the default roles to any person authenticated with their App (via auth).

This is related to (but distinct from) restricting access to roles #116

[nelsonic]

I still have my editor open for #85 so I'm going to make a quick pass at this now. Wish me luck! 💭

[nelsonic]

This issue is complete but will only be enabled once #123 is merged.