az/morz-infoboard
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(store): CreateScreenUser nimmt role-Parameter; ListScreenUsers schließt restricted ein

Browse source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Jesko Anschütz 2026-03-27 21:31:15 +01:00
parent 700567071b
commit 18ba448f05
1 changed files with 11 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
server/backend/internal/store/auth.go
View file

@ -155,11 +155,15 @@ func (s *AuthStore) EnsureAdminUser(ctx context.Context, tenantSlug, password st
return nil return nil
} }
// CreateScreenUser creates a new user with role 'screen_user' for the tenant // CreateScreenUser creates a new user with the given role for the tenant
// identified by tenantSlug. The password is hashed with bcrypt (cost 12). // identified by tenantSlug. role must be "screen_user" or "restricted".
// The password is hashed with bcrypt (cost 12).
// Returns pgx.ErrNoRows if the tenant does not exist, or a wrapped error if // Returns pgx.ErrNoRows if the tenant does not exist, or a wrapped error if
// the username is already taken (unique constraint violation). // the username is already taken (unique constraint violation).
func (s *AuthStore) CreateScreenUser(ctx context.Context, tenantSlug, username, password string) (*User, error) { func (s *AuthStore) CreateScreenUser(ctx context.Context, tenantSlug, username, password, role string) (*User, error) {
if role != "screen_user" && role != "restricted" {
return nil, fmt.Errorf("auth: invalid role: %s", role)
}
var tenantID string var tenantID string
err := s.pool.QueryRow(ctx, `select id from tenants where slug = $1`, tenantSlug).Scan(&tenantID) err := s.pool.QueryRow(ctx, `select id from tenants where slug = $1`, tenantSlug).Scan(&tenantID)
if err != nil { if err != nil {
@ -176,9 +180,9 @@ func (s *AuthStore) CreateScreenUser(ctx context.Context, tenantSlug, username,
row := s.pool.QueryRow(ctx, row := s.pool.QueryRow(ctx,
`insert into users(tenant_id, username, password_hash, role) `insert into users(tenant_id, username, password_hash, role)
values($1, $2, $3, 'screen_user') values($1, $2, $3, $4)
returning id, tenant_id, $4::text, username, password_hash, role, created_at`, returning id, tenant_id, $5::text, username, password_hash, role, created_at`,
tenantID, username, string(hash), tenantSlug) tenantID, username, string(hash), role, tenantSlug)
u, err := scanUserWithSlug(row) u, err := scanUserWithSlug(row)
if err != nil { if err != nil {
return nil, fmt.Errorf("auth: create screen user: %w", err) return nil, fmt.Errorf("auth: create screen user: %w", err)
@ -192,7 +196,7 @@ func (s *AuthStore) ListScreenUsers(ctx context.Context, tenantSlug string) ([]*
`select u.id, u.tenant_id, coalesce(t.slug, ''), u.username, u.password_hash, u.role, u.created_at `select u.id, u.tenant_id, coalesce(t.slug, ''), u.username, u.password_hash, u.role, u.created_at
from users u from users u
left join tenants t on t.id = u.tenant_id left join tenants t on t.id = u.tenant_id
where t.slug = $1 and u.role = 'screen_user' where t.slug = $1 and u.role IN ('screen_user', 'restricted')
order by u.username`, tenantSlug) order by u.username`, tenantSlug)
if err != nil { if err != nil {
return nil, fmt.Errorf("auth: list screen users: %w", err) return nil, fmt.Errorf("auth: list screen users: %w", err)