alexei.dolgolyov/web-app-launcher
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity
Files
ae114ab9ce0eb15dc1d437d2bba0a378e9f36b12
web-app-launcher/plans/phase-2-enhanced-features/phase-5-access-control.md
T

2.4 KiB
Raw Blame History

Phase 4: Per-Board Access Control UI

Status: ⬜ Not Started Parent plan: PLAN.md Domain: fullstack

Objective

Add a user-friendly access control interface for boards, allowing admins to manage per-board permissions with user/group pickers and visual indicators.

Tasks

  • Task 1: Create src/lib/components/board/BoardAccessControl.svelte — inline permission editor for boards
  • Task 2: Add access control tab/section to board editor page
  • Task 3: Create src/routes/api/boards/[id]/permissions/+server.ts — GET/POST/DELETE permissions for a board
  • Task 4: Update src/lib/components/admin/PermissionEditor.svelte — enhance with user/group search/autocomplete
  • Task 5: Update src/lib/components/board/BoardCard.svelte — show access level indicator (icon/badge)
  • Task 6: Update src/routes/boards/+page.svelte — show access indicators on board list
  • Task 7: Add guest access toggle with preview description to board editor
  • Task 8: Create src/lib/components/board/BoardShareDialog.svelte — quick share dialog for boards

Files to Modify/Create

  • src/lib/components/board/BoardAccessControl.svelte — NEW
  • src/lib/components/board/BoardShareDialog.svelte — NEW
  • src/routes/api/boards/[id]/permissions/+server.ts — NEW
  • src/routes/boards/[boardId]/edit/+page.svelte — MODIFY
  • src/routes/boards/[boardId]/edit/+page.server.ts — MODIFY
  • src/lib/components/admin/PermissionEditor.svelte — MODIFY
  • src/lib/components/board/BoardCard.svelte — MODIFY
  • src/routes/boards/+page.svelte — MODIFY

Acceptance Criteria

  • Board editor has a permissions section for managing access
  • Admins can grant/revoke view/edit/admin permissions per user or group
  • Board list shows access indicators (shared icon, guest badge, etc.)
  • Quick share dialog allows easy permission granting
  • Guest access toggle works with visual feedback

Notes

  • The permission system already exists from MVP (permissionService)
  • This phase adds the UI layer on top of existing backend
  • ⚠️ Big Bang: may need integration fixes in Phase 5

Review Checklist

  • All tasks completed
  • Code follows project conventions
  • No unintended side effects
  • Build passes
  • Tests pass (new + existing)

Handoff to Next Phase

Reference in New Issue View Git Blame Copy Permalink