Files
orion/docs/api/RBAC.md

17 lines
932 B
Markdown

## User Roles
- **Customer** - Access to public shop and own account space
- **Vendor** - Access to vendor area based on permissions. Vendor owner has full access, team members have access based on permissions
- **Admin** - Full access to platform administration
// TODO:
This multitenant application has 3 areas: admin, vendor, shop.
* Admin, vendor owner, and vendor team members can not register from the frontend.
* Admin accounts are created by super admins on the backend.
* Vendor owners are created by admin on the admin frontend by admins (when a vendor is created, a vendor owner account is automatically generated.)
* Vendor owners are then inviting team members to join via email, this is how vendor team members get created and activated (upon click on an email link)
* Customers are the only one who can register an account on the vendor shop. the accounts gets activated upon clicking on the registration email.