digidem / digidem/comapeo-core
Fix member role capabilities
Open
@RangerMauve is already working on this.
Since Oct 23, 2025.
dx
- Dominant language
- JavaScript
- Stars
- 24
- Forks
- 6
- Avg merge
- 1d 40m
- Merged PRs (30d)
- 8
Description
Description
Currently the capabilities for a "member" role is the same for all schema types:
{
readOwn: true,
writeOwn: true,
readOthers: true,
writeOthers: false
}
I think this is incorrect. The terminology is slightly confusing here: writeOwn means you have permission to create a record of the given type. writeOthers means you have the permission to edit a record created by someone else.
I think a project member should only be able to create these record types: coreOwnership, deviceInfo, observation. They should not be able to create: field, preset, icon, translation, role.
Tasks
- Update the member role docs permissions
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.