Files
orion/docs/api/RBAC.md

932 B

User Roles

  • Customer - Access to public shop and own account space
  • Vendor - Access to vendor area based on permissions. Vendor owner has full access, team members have access based on permissions
  • Admin - Full access to platform administration

// TODO: This multitenant application has 3 areas: admin, vendor, shop.

  • Admin, vendor owner, and vendor team members can not register from the frontend.
  • Admin accounts are created by super admins on the backend.
  • Vendor owners are created by admin on the admin frontend by admins (when a vendor is created, a vendor owner account is automatically generated.)
  • Vendor owners are then inviting team members to join via email, this is how vendor team members get created and activated (upon click on an email link)
  • Customers are the only one who can register an account on the vendor shop. the accounts gets activated upon clicking on the registration email.