Teams feature cannot manage authorization above the team's scope

[mohamedds-12]

In my application, an organization has multiple events, and a user can have multiple roles in different events, Until now it's all good I can just work with teams considering the event is the team, But the problem is that I have some roles that are focused to the organization ex: Owner, Admin and they're not related to the event. And therefore the previous approach cannot fix my problem cuz it's limited to users having roles in an event (team).

Is there any way I can assign different roles in different events (teams) for the user, along with the ability to assign some roles outside of the events for some users ?

[parallels999]

Yes, read documentation
teams-permissions#content-roles-creating

[mohamedds-12]

i point you roles-creating

Role creating is not the problem. The problem is that I have some resources outside of the team. So how can you check for the permissions that they can/cannot do on some resources outside of the team when there is no team_id yet, cuz you're outside of the team?

[erikn69]

it looks as if this package does not meet your requirements, have you checked out any of the alternatives?

Maybe, bouncer

[mohamedds-12]

it looks as if this package does not meet your requirements, have you checked out any of the alternatives?

Maybe, bouncer

I did take a look at it before but not a deep one, I will take a deeper look at it and see.

[yungifez]

Hello, did you solve this problem?

[mohamedds-12]

Hi, sorry I forgot that I've posted a thread here too !, Yes I've solved the problem and I will post it right away.

[mohamedds-12]

Eventually, after searching and asking other senior engineers I ended up going with the polymorphic solution :

I've tried going for a polymorphic relationship which basically means a user can have a role either in an event or an organization like so: user_id, role_id, entity_id, entity_type, But it's a lot of work and I don't know if it's the ideal solution.

It's a little complicated, but here is the breakdown of the steps :

1. Polymorphic Relationship:

   • Establish a polymorphic relationship between the teams table and the events and organizations tables. This allows a team to belong to either an event or an organization.

2. Creating Teams for Organizations:

   • Create a team for each organization. This team will serve as a container for users associated with that organization.

3. Inviting Users and Assigning Roles:

   • Invite users to join the organization's team.
   • Assign users roles such as Owner or Organization Admin at the organization level.

4. Creating Teams for Events:

   • When creating an event within an organization, create a new team specifically for that event.

5. Assigning Teams to Events:

   • Establish a link between the event and its corresponding team through the polymorphic relationship. This ensures that permissions for the event can be managed separately from the organization.

6. Managing Event Permissions:

   • Assign users from the organization's team roles like Event Admin or Moderator in the event's team. This ensures that users who have permissions at the organization level also have the necessary permissions for the events they are involved in.

7. Inviting Users to Event Teams:

   • Invite users to be part of the event's team.
   • Assign them roles like Event Admin, Moderator, etc., based on their responsibilities within the event.