RBAC: How to Revoke a role from a person?

[nelsonic]

As part of granting roles in RBAC, we need the ability to revoke a role from a person.
This will probably only be used very rarely, but it still needs to be possible.

• add :revoked field to people_roles table/schema
• updating a people_roles record and setting the revoked field to the current timestamp will indicate when the role was revoked from that person.

  Note: we don't want to delete a people_roles record because it's part of our audit log.

• check that a role is not revoked when the person logs in before setting roles on JWT.
• Create UI for revoking a role UI: Grant/Revoke Role for Person #94

[nelsonic]

Revoked column in people_roles schema/table:

[nelsonic]

added revoker_id so that we know who revoked the role from a person:

[nelsonic]

My hella bad UI (that will only ever be seen by an Admin) works:

Profile page for person (visible to admin):

Confirmation page: (no JS required)

Redirects back to the person's (admin) profile page displaying the Date+time of the revocation:

[nelsonic]

This feature is working and will be included as part of #85 ✅