Role based access control#72
Conversation
Emphasize component reusability and modular design in UI implementation using Next.js.
…tion + oauth handling
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request integrates the usermanagement_service into the unified Docker deployment and significantly expands its functionality. Key additions include OAuth authentication support for GitHub, ORCID, and Globus, a comprehensive role-based access control (RBAC) system with permissions and page-level restrictions, and administrative capabilities such as user banning. The update also introduces an environment variable drift detection script and detailed design documentation. Review feedback identifies a security risk concerning encryption key fallbacks, data integrity concerns during profile deletion, and a recommendation to use SQLAlchemy's expression language for database queries to ensure consistency.
1 participant
This PR adds the RBAC.
Please note that it also contains some old design doc info and can be ignored for this review.
Important: Merge #73 first before merging this.