New schema for permissions and roles management

domain/user/endpoint.go

@@ -467,6 +467,7 @@ func (h *Handler) Update(w http.ResponseWriter, r *http.Request) {
 	a.Editor = u.Editor
 	a.Admin = u.Admin
 	a.Active = u.Active
+	a.Users = u.ViewUsers
 
 	err = h.Store.Account.UpdateAccount(ctx, a)
 	if err != nil {

domain/user/mysql/store.go

@@ -240,29 +240,6 @@ func (s Scope) GetVisibleUsers(ctx domain.RequestContext) (u []user.User, err er
 	return
 }
 
-/*
-
-`SELECT
-	id, refid, firstname, lastname, email, initials, password, salt, reset, created, revised
-FROM
-	user
-WHERE
-	refid IN (SELECT userid FROM account where orgid = '4Tec34w8')
-	AND refid IN
-		(SELECT userid FROM labelrole where userid != '' AND orgid='4Tec34w8'
-			AND labelid IN (
-				SELECT refid FROM label WHERE orgid='4Tec34w8' AND type=2 AND userid='iJdf6qUW'
-				UNION ALL
-				SELECT refid FROM label a WHERE orgid='4Tec34w8' AND type=1 AND refid IN (SELECT labelid FROM labelrole WHERE orgid='4Tec34w8' AND userid='' AND (canedit=1 OR canview=1))
-				UNION ALL
-				SELECT refid FROM label a WHERE orgid='4Tec34w8' AND type=3 AND refid IN (SELECT labelid FROM labelrole WHERE orgid='4Tec34w8' AND userid='iJdf6qUW' AND (canedit=1 OR canview=1))
-			)
-	 	GROUP BY userid)
-ORDER BY
-	firstname, lastname`
-
-*/
-
 // UpdateUser updates the user table using the given replacement user record.
 func (s Scope) UpdateUser(ctx domain.RequestContext, u user.User) (err error) {
 	u.Revised = time.Now().UTC()

domain/user/user.go

@@ -39,12 +39,14 @@ func AttachUserAccounts(ctx domain.RequestContext, s domain.Store, orgID string,
 	u.Editor = false
 	u.Admin = false
 	u.Active = false
+	u.ViewUsers = false
 
 	for _, account := range u.Accounts {
 		if account.OrgID == orgID {
 			u.Admin = account.Admin
 			u.Editor = account.Editor
 			u.Active = account.Active
+			u.ViewUsers = account.Users
 			break
 		}
 	}