Add /api/admin authorization

migrations/20200716111333_user.js

@@ -5,6 +5,7 @@ export async function up(knex) {
       table.string('username').notNullable()
       table.string('hash')
       table.timestamp('last_login').nullable()
+      table.json('roles')
     })
 }
 

seeds/User.js

@@ -1,6 +1,7 @@
 export default [
   {
     username: 'ditojs',
-    password: 'ditojs'
+    password: 'ditojs',
+    roles: ['admin', 'editor']
   }
 ]

src/server/controllers/api/admin/dummies.js

@@ -5,6 +5,7 @@ export class Dummies extends ModelController {
   modelClass = Dummy
   scope = '^admin'
   graph = true
+  authorize = ['admin', 'editor']
 
   collection = {
     allow: ['find', 'insert']

src/server/models/user.js

@@ -1,3 +1,16 @@
 import { UserModel } from '@ditojs/server'
 
-export class User extends UserModel { }
+export class User extends UserModel {
+  static properties = {
+    roles: {
+      type: 'array',
+      items: {
+        type: 'string',
+        enum: ['admin', 'editor']
+      },
+      minItems: 1,
+      uniqueItems: true,
+      required: true
+    }
+  }
+}