Issue 94 add multiple roles to user model

backend/.env

@@ -1,5 +1,5 @@
-PORT=8123
-MONGODB_URI=mongodb://localhost:27017/scheduleapp
+PORT=3000
+MONGODB_URI=mongodb://localhost:27017
 JWT_SECRET=your_jwt_secret_key_change_in_production
 JWT_EXPIRES_IN=7d
 NODE_ENV=development

backend/.env.example

@@ -1,6 +1,6 @@
 # backend environment configuration
 PORT=8123
-MONGODB_URI=mongodb://localhost:27017/scheduleapp
+MONGODB_URI=mongodb://localhost:27017
 JWT_SECRET=your_jwt_secret_key_change_in_production
 JWT_EXPIRES_IN=7d
 NODE_ENV=development

backend/src/middleware/roleMiddleware.ts

@@ -0,0 +1,23 @@
+import { Request, Response, NextFunction } from 'express';
+import { UserRole } from '../models/UserRole';
+interface AuthRequest extends Request {
+    user?: {
+      role: UserRole;
+    };
+  }
+// role permission checker
+const authorize = (roles: UserRole[]) => {
+  return (req: AuthRequest, res: Response, next: NextFunction) => {
+    if (!req.user) { //user exists
+      return res.status(401).json({ message: 'Unauthorized' });
+    }
+
+    if (!roles.includes(req.user.role)) { //role not in roles
+      return res.status(403).json({ message: 'Forbidden: Insufficient permissions' });
+    }
+
+    next();
+  };
+};
+
+export default authorize;

backend/src/migrations/userMigration.ts

@@ -0,0 +1,26 @@
+import mongoose from 'mongoose';
+import User, { UserRole } from '../models/User';
+import dotenv from 'dotenv';
+
+dotenv.config();
+
+const migrateUsers = async () => {
+  try {
+    await mongoose.connect(process.env.MONGODB_URI!);
+    console.log('Connected to database');
+
+    // update users without a role, setting default role as candidate
+    const result = await User.updateMany(
+      { role: { $exists: false } },
+      { $set: { role: UserRole.CANDIDATE } }
+    );
+
+    console.log(`Migration completed. Updated ${result.modifiedCount} users.`);
+  } catch (error) {
+    console.error('Migration failed:', error);
+  } finally {
+    mongoose.disconnect();
+  }
+};
+
+migrateUsers();

backend/src/models/User.ts

@@ -1,10 +1,6 @@
 import mongoose from 'mongoose';
 import bcrypt from 'bcrypt';
-
-// user roles
-export enum UserRole {
-  ADMIN = 'admin',
-}
+import { UserRole } from './UserRole'
 
 // user interface
 export interface IUser extends mongoose.Document {
@@ -13,6 +9,8 @@ export interface IUser extends mongoose.Document {
   name: string;
   teamName: string;
   role: UserRole;
+  groupAssignments?: string[];
+  availability?: mongoose.Types.ObjectId[];
   comparePassword(enteredPassword: string): Promise<boolean>;
 }
 
@@ -44,6 +42,16 @@ const userSchema = new mongoose.Schema(
       enum: Object.values(UserRole),
       default: UserRole.ADMIN,
     },
+    groupAssignments: [{
+      type: String,
+      required: function (this: { role: UserRole }) {
+        return this.role !== UserRole.ADMIN;
+      },
+    }],
+    availability: [{
+      type: mongoose.Schema.Types.ObjectId,
+      ref: 'Availability',
+    }],
   },
   {
     timestamps: true,

backend/src/models/UserRole.ts

@@ -0,0 +1,5 @@
+export enum UserRole {
+  ADMIN = 'admin',
+  INTERVIEWER = 'interviewer',
+  CANDIDATE = 'candidate'
+}

backend/src/routes/index.ts

@@ -5,7 +5,8 @@ import { Router } from 'express';
 
 // importing status routes
 import statusRoutes from './statusRoutes';
-
+// import user routes
+import userRoutes from './userRoutes';
 const router = Router();
 
 // api root route - returns general api info
@@ -111,5 +112,6 @@ router.get('/test', (req, res) => {
 
 // mounting status routes
 router.use('/status', statusRoutes);
-
+// mounting user routes
+router.use('/users', userRoutes);
 export default router; 

backend/src/routes/userRoutes.ts

@@ -0,0 +1,20 @@
+import express from 'express';
+import { UserRole } from '../models/UserRole';
+import authorize from '../middleware/roleMiddleware';
+const router = express.Router();
+
+// admin-only: manage teams, users
+router.post('/teams', authorize([UserRole.ADMIN]), (req, res) => {
+  res.json({ message: 'Team created successfully' });
+});
+// interviewer and candidate: submit availability
+router.post('/availability', authorize([UserRole.INTERVIEWER, UserRole.CANDIDATE]), (req, res) => {
+  res.json({ message: 'Availability submitted' });
+});
+
+// interviewer & candidate: view assigned meetings
+router.get('/meetings', authorize([UserRole.INTERVIEWER, UserRole.CANDIDATE]), (req, res) => {
+  res.json({ message: 'Here are your assigned meetings' });
+});
+
+export default router;

package.json

@@ -12,5 +12,8 @@
   },
   "devDependencies": {
     "concurrently": "^8.2.2"
+  },
+  "dependencies": {
+    "bcrypt": "^5.1.1"
   }
-} 
+}