diff --git a/docker-compose.yml b/docker-compose.yml index f6ab4b43..26ef984a 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -37,7 +37,7 @@ services: ports: - "8000:8000" environment: - DATABASE_URL: postgresql://ecommerce_user:secure_password@db:5432/ecommerce_db + DATABASE_URL: postgresql://wizamart_user:secure_password@db:5432/wizamart_db JWT_SECRET_KEY: ${JWT_SECRET_KEY:-your-super-secret-key} REDIS_URL: redis://redis:6379/0 depends_on: diff --git a/docs/api/RBAC.md b/docs/api/RBAC.md new file mode 100644 index 00000000..339e494f --- /dev/null +++ b/docs/api/RBAC.md @@ -0,0 +1,16 @@ +## User Roles + +- **Customer** - Access to public shop and own account space +- **Vendor** - Access to vendor area based on permissions. Vendor owner has full access, team members have access based on permissions +- **Admin** - Full access to platform administration + +// TODO: +This multitenant application has 3 areas: admin, vendor, shop. + +* Admin, vendor owner, and vendor team members can not register from the frontend. +* Admin accounts are created by super admins on the backend. +* Vendor owners are created by admin on the admin frontend by admins (when a vendor is created, a vendor owner account is automatically generated.) +* Vendor owners are then inviting team members to join via email, this is how vendor team members get created and activated (upon click on an email link) +* Customers are the only one who can register an account on the vendor shop. the accounts gets activated upon clicking on the registration email. + + diff --git a/docs/api/authentication.md b/docs/api/authentication.md index d2ca4f30..debd229b 100644 --- a/docs/api/authentication.md +++ b/docs/api/authentication.md @@ -1,6 +1,6 @@ # Authentication -JWT-based authentication system for the Letzshop Import API. +JWT-based authentication system for the FastApi Multitenant eCommerce API. ## Overview