fossnsbm / fossnsbm-web-backend Goto Github PK

As a user/ Admin or super admin, I should be able to login to the RSVP site

User types

• User
• Admin
• Super admin

As a user, I should be able to check the events in order to register for the events which I want to join.

Blocked by #10

User Types

• User

As a user, I should be able to sign up to the site in order to register for an event

User types

• User

As a user/ Admin or super admin, I should be able to edit my profile at any moment.

User types

• User
• Admin
• Super admin

Getting the role from the client is a bad idea, you could make a collection called users in firestore and create documents corresponding to the user's UID and have an empty "role" field that can be updated later along with their info?.
But I guess the above logic would lead to a lot of hardcoded "rules" which would be hard to maintain?.

OR

Since you are using firebase firestore here you could ditch the whole role thing and use firebase rules instead, you could literally write a function like this:

function isAdmin(){ return request.auth.uid == "ADMINUID"; }

match /events/{ allow read :if isSignedIn(); allow write:if isAdmin(); allow delete:if isAdmin(); }

Just my idea/opinion maybe you guys have figured out something better
Thanks

As a user/ Admin or super admin, I should be able to login to the RSVP site

As an admin or super admin, I should be able to remove the events.

Blocked by #10

User types

• Admin
• Super admin

As a user, I should be able to register for the event in order to join.

Blocked by #10

User types

• User

As an admin or super admin, I should be able to create an event on the rsvp site.

User Types

• Admin
• Super admin

As an admin or super admin, I should be able to edit an event if there is something that needs to change. (Ex: - If the date was postponed, I should be able to edit the date of the event.)

Blocked by #10

User types

• Admin
• Super admin

As a user/ Admin or super admin, I should be able to sign up to the site in order to register for an event

User types

• User
• Admin
• Super admin

As an admin or super admin, I should be able to check the responses which were gathered from the registrations of events.

Blocked by #8

User types

• Admin
• Super admin