[management] use permission modules (#3622)

management/server/permissions/roles/admin.go

@@ -0,0 +1,21 @@
+package roles
+
+import (
+	"github.com/netbirdio/netbird/management/server/permissions/modules"
+	"github.com/netbirdio/netbird/management/server/permissions/operations"
+	"github.com/netbirdio/netbird/management/server/types"
+)
+
+var Admin = RolePermissions{
+	Role: types.UserRoleAdmin,
+	AutoAllowNew: map[operations.Operation]bool{
+		operations.Read:  true,
+		operations.Write: true,
+	},
+	Permissions: Permissions{
+		modules.Accounts: {
+			operations.Read:  true,
+			operations.Write: false,
+		},
+	},
+}

management/server/permissions/roles/owner.go

@@ -0,0 +1,14 @@
+package roles
+
+import (
+	"github.com/netbirdio/netbird/management/server/permissions/operations"
+	"github.com/netbirdio/netbird/management/server/types"
+)
+
+var Owner = RolePermissions{
+	Role: types.UserRoleOwner,
+	AutoAllowNew: map[operations.Operation]bool{
+		operations.Read:  true,
+		operations.Write: true,
+	},
+}

management/server/permissions/roles/role_permissions.go

@@ -0,0 +1,21 @@
+package roles
+
+import (
+	"github.com/netbirdio/netbird/management/server/permissions/modules"
+	"github.com/netbirdio/netbird/management/server/permissions/operations"
+	"github.com/netbirdio/netbird/management/server/types"
+)
+
+type RolePermissions struct {
+	Role         types.UserRole
+	Permissions  Permissions
+	AutoAllowNew map[operations.Operation]bool
+}
+
+type Permissions map[modules.Module]map[operations.Operation]bool
+
+var RolesMap = map[types.UserRole]RolePermissions{
+	types.UserRoleOwner: Owner,
+	types.UserRoleAdmin: Admin,
+	types.UserRoleUser:  User,
+}

management/server/permissions/roles/user.go

@@ -0,0 +1,14 @@
+package roles
+
+import (
+	"github.com/netbirdio/netbird/management/server/permissions/operations"
+	"github.com/netbirdio/netbird/management/server/types"
+)
+
+var User = RolePermissions{
+	Role: types.UserRoleUser,
+	AutoAllowNew: map[operations.Operation]bool{
+		operations.Read:  false,
+		operations.Write: false,
+	},
+}