feat: add student manager and student viewer roles for RBAC

Author: kethan1

strapi/src/api/admin-assignment/content-types/admin-assignment/schema.json

@@ -61,7 +61,7 @@
       "type": "relation",
       "relation": "manyToOne",
       "target": "api::school.school",
-      "inversedBy": "menu_items"
+      "inversedBy": "menuItems"
     }
   }
 }

strapi/src/api/menu-item/content-types/menu-item/schema.json

@@ -49,11 +49,16 @@
     "instagram": {
       "type": "string"
     },
-    "menu_items": {
+    "menuItems": {
       "type": "relation",
       "relation": "oneToMany",
       "target": "api::menu-item.menu-item",
       "mappedBy": "school"
+    },
+    "managers": {
+      "type": "relation",
+      "relation": "oneToMany",
+      "target": "admin::user"
     }
   }
 }

strapi/src/api/school/content-types/school/schema.json

@@ -3,23 +3,28 @@ export default {
   async bootstrap({ strapi }) {
     const getAssignedSchoolIds = async (user) => {
       if (!user) return [];
-      const assignment = await strapi
-        .documents("api::admin-assignment.admin-assignment")
-        .findFirst({
-          filters: { user: { id: user.id } },
-          populate: ["schools"],
+
+      const schools = await strapi
+        .documents("api::school.school")
+        .findMany({
+          filters: {
+            managers: {
+              id: user.id,
+            },
+          },
           fields: ["id"],
         });
 
-      const schools = assignment.schools;
+      console.log(schools)
+
       return schools.map((school) => school.id);
     };
 
-    const getMenuItemIds = async (schoolId: string): Promise<number[]> => {
+    const getMenuItemIds = async (schoolIds: string[]): Promise<number[]> => {
       const itemIds = await strapi
         .documents("api::menu-item.menu-item")
         .findMany({
-          filters: { school: { id: schoolId } },
+          filters: { school: { id: { $in: schoolIds } } },
           populate: ["school"],
           fields: ["id"],
         });
@@ -29,24 +34,22 @@ export default {
 
     await strapi.admin.services.permission.conditionProvider.registerMany([
       {
-        displayName: "Schools assigned to current admin",
-        name: "schools-assigned-to-admin",
+        displayName: "Manager Permissions for School",
+        name: "school-for-manager",
         async handler(user) {
           const schoolIds = await getAssignedSchoolIds(user);
           if (schoolIds.length === 0) return false;
           return { id: { $in: schoolIds } };
         },
       },
       {
-        displayName: "Menu items for admin's schools",
-        name: "menu-items-for-admin-schools",
+        displayName: "Manager Permissions for Menu Items",
+        name: "menu-items-for-manager",
         async handler(user) {
           const schoolIds = await getAssignedSchoolIds(user);
           if (schoolIds.length === 0) return false;
 
-          const itemIds = (await Promise.all(
-            schoolIds.map(async schoolId => await getMenuItemIds(schoolId))
-          )).flat();
+          const itemIds = await getMenuItemIds(schoolIds);
 
           return { id: { $in: itemIds } };
         },

strapi/src/index.ts

@@ -430,38 +430,6 @@ export interface AdminUser extends Struct.CollectionTypeSchema {
   };
 }
 
-export interface ApiAdminAssignmentAdminAssignment
-  extends Struct.CollectionTypeSchema {
-  collectionName: 'admin_assignments';
-  info: {
-    displayName: 'Admin Assignment';
-    pluralName: 'admin-assignments';
-    singularName: 'admin-assignment';
-  };
-  options: {
-    draftAndPublish: false;
-  };
-  attributes: {
-    createdAt: Schema.Attribute.DateTime;
-    createdBy: Schema.Attribute.Relation<'oneToOne', 'admin::user'> &
-      Schema.Attribute.Private;
-    locale: Schema.Attribute.String & Schema.Attribute.Private;
-    localizations: Schema.Attribute.Relation<
-      'oneToMany',
-      'api::admin-assignment.admin-assignment'
-    > &
-      Schema.Attribute.Private;
-    publishedAt: Schema.Attribute.DateTime;
-    schools: Schema.Attribute.Relation<'manyToMany', 'api::school.school'> &
-      Schema.Attribute.Required;
-    updatedAt: Schema.Attribute.DateTime;
-    updatedBy: Schema.Attribute.Relation<'oneToOne', 'admin::user'> &
-      Schema.Attribute.Private;
-    user: Schema.Attribute.Relation<'manyToOne', 'admin::user'> &
-      Schema.Attribute.Required;
-  };
-}
-
 export interface ApiCartCart extends Struct.CollectionTypeSchema {
   collectionName: 'carts';
   info: {
@@ -624,7 +592,8 @@ export interface ApiSchoolSchool extends Struct.CollectionTypeSchema {
       'api::school.school'
     > &
       Schema.Attribute.Private;
-    menu_items: Schema.Attribute.Relation<
+    managers: Schema.Attribute.Relation<'oneToMany', 'admin::user'>;
+    menuItems: Schema.Attribute.Relation<
       'oneToMany',
       'api::menu-item.menu-item'
     >;
@@ -1187,7 +1156,6 @@ declare module '@strapi/strapi' {
       'admin::transfer-token': AdminTransferToken;
       'admin::transfer-token-permission': AdminTransferTokenPermission;
       'admin::user': AdminUser;
-      'api::admin-assignment.admin-assignment': ApiAdminAssignmentAdminAssignment;
       'api::cart.cart': ApiCartCart;
       'api::global.global': ApiGlobalGlobal;
       'api::menu-item.menu-item': ApiMenuItemMenuItem;