Workflows for administrative tasks?

Reference: https://github.com/postgraphql/postgraphql/issues/488

Could you please further explain following points with an example.

> Then I modify the JWT role based on whether or not the user is an admin (appname_admin) or not (appname_visitor). I also set a JWT claim for admin for when security definer is used somewhere (since that effectively changes the role) so I can use a current_user_is_admin() method in my DB logic.

> (Authenticator is the default role that PostGraphQL assumes, I grant that role only enough permissions to introspect the schema and no more, plus of course the ability to switch to one of the relevant roles based on the JWT)

まず、参照されている PostGraphQL issue #488 と、JWT roles、authenticator role、security-definer functions についての引用された議論を読みます。具体例を使って管理者と訪問者のワークフローを文書化します。引用されたポイントが、読者が適用できる程度に明確に説明されていれば完了です。

索引モデルが issue の本文から書いたものです。