v3: added a roles/permissions system, added user management tab on user profile

api/services/user-service.ts

@@ -12,7 +12,7 @@ import { hashPassword } from "../lib/jwt.ts";
 import { linkAttachments } from "./attachment-service.ts";
 
 const USER_SELECT =
-  `SELECT u.id, u.username, u.password_hash, u.is_admin, u.created_at, u.updated_at, u.avatar_mime, u.description, u.invited_by, u.email,
+  `SELECT u.id, u.username, u.password_hash, u.role, u.created_at, u.updated_at, u.avatar_mime, u.description, u.invited_by, u.email,
           i.username as invited_by_username
    FROM users u
    LEFT JOIN users i ON i.id = u.invited_by`;
@@ -39,13 +39,13 @@ export async function createUser(
   const passwordHash = await hashPassword(request.password);
 
   db.prepare(
-    `INSERT INTO users (id, username, password_hash, is_admin, created_at, invited_by, email)
+    `INSERT INTO users (id, username, password_hash, role, created_at, invited_by, email)
       VALUES (?, ?, ?, ?, ?, ?, ?);`,
   ).run(
     userId,
     request.username,
     passwordHash,
-    0,
+    "user",
     createdAt.toISOString(),
     inviterId,
     request.email,
@@ -55,7 +55,7 @@ export async function createUser(
     id: userId,
     username: request.username,
     passwordHash,
-    isAdmin: false,
+    role: "user",
     createdAt,
     email: request.email,
   };
@@ -155,11 +155,11 @@ export async function updateUser(
   const updatedUserRow = userApiToRow(updatedUser);
 
   const userResult = db.prepare(
-    `UPDATE users SET username = ?, password_hash = ?, is_admin = ?, description = ?, email = ?, updated_at = ? WHERE id = ?`,
+    `UPDATE users SET username = ?, password_hash = ?, role = ?, description = ?, email = ?, updated_at = ? WHERE id = ?`,
   ).run(
     updatedUserRow.username,
     updatedUserRow.password_hash,
-    updatedUserRow.is_admin,
+    updatedUserRow.role,
     updatedUserRow.description,
     updatedUserRow.email,
     now.toISOString(),