[
https://issues.apache.org/jira/browse/FINERACT-787?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16953605#comment-16953605
]
Santosh Math commented on FINERACT-787:
---------------------------------------
[~kakoma], thanks for the PR: https://github.com/apache/fineract/pull/649
> Support creation of self-service users
> --------------------------------------
>
> Key: FINERACT-787
> URL: https://issues.apache.org/jira/browse/FINERACT-787
> Project: Apache Fineract
> Issue Type: New Feature
> Components: User Management
> Affects Versions: 1.3.0
> Reporter: Peter Kakoma
> Assignee: Peter Kakoma
> Priority: Minor
> Labels: p1
> Time Spent: 10m
> Remaining Estimate: 0h
>
> *Background*
> A self-service user is a staff user assigned to a specific role which can
> perform certain actions. These users are used to login to the self-service
> web and mobile applications. The challenge is that there's no user-friendly
> way of creating a self-service user.
>
> *Where we are now*
> There's currently [an open PR
> |https://github.com/openMF/community-app/pull/2139]to the community app that
> allows the creation of a self-service user. In it, self-service user creation
> is done using the same API used to create a back-office user but while
> specifying a _self-service role_ in the API call.
> First, an API call is made to retrieve all available roles. These roles are
> presented to the admin who then selects which one is the self service role.
> With the role selected, an API call is made to create the self service user.
>
> *The problem*
> Since the admin is presented with all roles, if they select a wrong role [a
> non self-service role], the user will have more/less rights than they ought
> to.
>
> *The proposed solution*
> The solution is three-fold
>
> 1. Create a different template resource in the API which returns only the
> self-service related roles. Ref [
> #[https://demo.openmf.org/api-docs/apiLive.htm#users_template]] i.e. Besides
> 'availableRoles', add a 'selfServiceRoles' in the returned data
> 2. With that done, update the open PR to use `selfServiceRoles`
> 3. The API call to create the self-service user is made to a custom
> endpoint, POST
> [https://DomainName/api/v1/users/self|https://domainname/api/v1/users/self],
> that evaluates that the role specified is a self-service role and then
> proceeds to create the user.
>
> This card is to propose that items 1 and 3 are added to the fineract. I'm on
> hand to explore implementing the card if this is accepted.
>
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
