Role Based Access Control

.eslintrc.json

@@ -0,0 +1,14 @@
+{
+  "env": {
+    "commonjs": true,
+    "es2021": true,
+    "node": true
+  },
+  "extends": ["airbnb-base"],
+  "parserOptions": {
+    "ecmaVersion": 12
+  },
+  "rules": {
+    "no-console": "off"
+  }
+}

.prettierrc.json

@@ -0,0 +1,5 @@
+{
+  "arrowParens": "always",
+  "singleQuote": true,
+  "trailingComma": "all"
+}

Dockerfile

@@ -6,7 +6,7 @@ WORKDIR /src
 RUN npm install
 ARG viewer
 ARG fork
-RUN git clone https://github.com/${fork:-camicroscope}/camicroscope.git --branch=${viewer:-master}
+#RUN git clone https://github.com/${fork:-camicroscope}/camicroscope.git --branch=${viewer:-master}
 EXPOSE 8010
 
 RUN chgrp -R 0 /src && \

README.md

@@ -46,7 +46,7 @@ The CSP headers are generated from `contentSecurityPolicy.json`.
 ## User property variables
 These are set in userFunction and injected into the token.
 
-userType -- Null, Editor, Admin as userTypes (e.g. Admin can create users, Editor can create marks, Null can't create anything except logs)
+userType -- Null, Editor, Admin as user roles (e.g. Admin can create users, Editor can create marks, Null can't create anything except logs). The roles are hierarchical, i.e. a higher role has all rights that the roles of its juniors.
 
 userFilter -- list of values which must be present in given field in filtered data responses