[Feature] RBAC Management interface

[Yoronex]

Is this a feature for the SudoSOS point of sale or for the SudoSOS dashboard?

Dashboard

What would you like?

An interface which shows all roles within SudoSOS. Then, for each role, the user should be able to view/add/remove users to that role and to change the permissions of that role.

Note that the amount of users of a specific role can be quite large (for example when you look at the USER role, which includes everyone).

Why is this needed?

During the ABC SudoSOS meeting, we decided on a role where some people next to the BACPM are able to create/update/delete products, containers and POSs. Because this is a GEWIS-specific role and not assignable to a specific user type, we should create a new role for this within SudoSOS. Unfortunately, no interface currently exists to perform this action.

Other information

System roles (which have a USER_TYPE assigned to it) are immutable, so these should be view-only. For the other roles we user LDAP to assign users to them, but for the versatility of SudoSOS, it is best if we also have an interface that can do this. It should not be a big issue if these role assignments might be overwritten, as the BACPM is practically the only one who has access to this administrator interface.