Provide Role Based Access Control feature to admin API and admin dashboard UI

[avsilva]

It would be nice to have role based access control on the medusa API endpoints.
The user role could also be used to filter out admin UI components, like links, buttons, etc

[ghost]

Any updates on this idea? It looks very impressive.

[lexvz14]

https://docs.medusajs.com/modules/users/backend/rbac
There are options to implement roles and permissions based on these roles. I might take it for a spin shortly.

[ambigos1]

https://docs.medusajs.com/modules/users/backend/rbac There are options to implement roles and permissions based on these roles. I might take it for a spin shortly.

The link is broken

[MattEzekiel]

@skdishansachin manteiners says that there are no plans for user roles

[ambigos1]

I can't believe that a basic and important feature such as roll-based access is not implemented in Medusa.

[radoslaw-sz]

My company tried to not fork the Medusa and create a plugin. Here are the results:

showcase.mp4

However, we are still waiting for Medusa v2 to support plugins out of the box as this one won't be open-sourced unfortunately.

[francisNeetha]

Hi, I've been struggling with the same issue and I'm really interested in solving it the way you've done here. I'm trying to create a plugin and would love to follow the same approach you've taken. Could you please guide me through the steps or share more details on how you implemented it? If you’ve created any repository related to this, it would be greatly appreciated if you could share it with me.

[radoslaw-sz]

hi @francisNeetha - due to commercial nature of this plugin, I cannot unfortunately share the details... Only via commercial cooperation.

[francisNeetha]

Thank you for your response. I Appreciate you getting back to me.

[codercody]

Isn't RBAC outlined in the auth module? What RBAC features would you want that aren't outlined here?

[SalahAdDin]

not and answer yet