Workflows for administrative tasks?

Reference: https://github.com/postgraphql/postgraphql/issues/488

Could you please further explain following points with an example.

> Then I modify the JWT role based on whether or not the user is an admin (appname_admin) or not (appname_visitor). I also set a JWT claim for admin for when security definer is used somewhere (since that effectively changes the role) so I can use a current_user_is_admin() method in my DB logic.

> (Authenticator is the default role that PostGraphQL assumes, I grant that role only enough permissions to introspect the schema and no more, plus of course the ability to switch to one of the relevant roles based on the JWT)

Start by reading the referenced PostGraphQL issue #488 and the quoted discussion about JWT roles, the authenticator role, and security-definer functions. Document the administrative and visitor workflow with a concrete example; done means the quoted points are explained clearly enough for a reader to apply them.

Escrito por el modelo de indexación a partir del texto del issue.