ed4062aef0
- Users: added role field (admin/editor), role field locked to adminOnly update - SiteSettings, AnnouncementBar, PopupAnnouncement: update restricted to adminOnly - Added src/access/adminOnly.ts helper
48 lines
1.1 KiB
TypeScript
48 lines
1.1 KiB
TypeScript
import type { CollectionConfig } from 'payload'
|
|
import { authenticated } from '../../access/authenticated'
|
|
|
|
// Only admins can manage users
|
|
const adminOnly = ({ req: { user } }: any) => user?.role === 'admin'
|
|
|
|
export const Users: CollectionConfig = {
|
|
slug: 'users',
|
|
access: {
|
|
admin: authenticated,
|
|
create: adminOnly,
|
|
delete: adminOnly,
|
|
read: authenticated,
|
|
update: authenticated, // users can update themselves; field-level locks the role field
|
|
},
|
|
admin: {
|
|
defaultColumns: ['name', 'email', 'role'],
|
|
useAsTitle: 'name',
|
|
},
|
|
auth: true,
|
|
fields: [
|
|
{
|
|
name: 'name',
|
|
type: 'text',
|
|
required: true,
|
|
},
|
|
{
|
|
name: 'role',
|
|
type: 'select',
|
|
label: 'Roll',
|
|
required: true,
|
|
defaultValue: 'editor',
|
|
options: [
|
|
{ label: 'Admin', value: 'admin' },
|
|
{ label: 'Redaktör', value: 'editor' },
|
|
],
|
|
// Only admins can change roles
|
|
access: {
|
|
update: adminOnly,
|
|
},
|
|
admin: {
|
|
description: 'Admin har full åtkomst. Redaktör kan hantera sidor, inlägg och media.',
|
|
},
|
|
},
|
|
],
|
|
timestamps: true,
|
|
}
|