Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/vandodev/course-saas-next-rbac
NextSAS-RBAC: SaaS robusto com Next.js 14, RBAC, ABAC, Node.js, Fastify, Prisma e TurboRepo para controle de acesso granular, front-end performante e desenvolvimento eficiente.
https://github.com/vandodev/course-saas-next-rbac
api casl docker docker-compose eslint fastify monorepo next nextjs node nodejs orm postgres prisma prisma-orm react rocketseat rod turborepo typescript
Last synced: about 1 month ago
JSON representation
NextSAS-RBAC: SaaS robusto com Next.js 14, RBAC, ABAC, Node.js, Fastify, Prisma e TurboRepo para controle de acesso granular, front-end performante e desenvolvimento eficiente.
- Host: GitHub
- URL: https://github.com/vandodev/course-saas-next-rbac
- Owner: vandodev
- Created: 2024-04-21T01:39:52.000Z (7 months ago)
- Default Branch: main
- Last Pushed: 2024-08-12T12:31:36.000Z (3 months ago)
- Last Synced: 2024-09-30T18:21:53.275Z (about 2 months ago)
- Topics: api, casl, docker, docker-compose, eslint, fastify, monorepo, next, nextjs, node, nodejs, orm, postgres, prisma, prisma-orm, react, rocketseat, rod, turborepo, typescript
- Language: TypeScript
- Homepage:
- Size: 1.02 MB
- Stars: 1
- Watchers: 1
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Next.js SaaS + RBAC
This project contains all the necessary boilerplate to setup a multi-tenant SaaS with Next.js including authentication and RBAC authorization.
## Features
### Authentication
- [ ] It should be able to authenticate using e-mail & password;
- [ ] It should be able to authenticate using Github account;
- [ ] It should be able to recover password using e-mail;
- [x] It should be able to create an account (e-mail, name and password);
### Organizations
- [ ] It should be able to create a new organization;
- [ ] It should be able to get organizations to which the user belongs;
- [ ] It should be able to update an organization;
- [ ] It should be able to shutdown an organization;
- [ ] It should be able to transfer organization ownership;
### Invites
- [ ] It should be able to invite a new member (e-mail, role);
- [ ] It should be able to accept an invite;
- [ ] It should be able to revoke a pending invite;
### Members
- [ ] It should be able to get organization members;
- [ ] It should be able to update a member role;
### Projects
- [ ] It should be able to get projects within a organization;
- [ ] It should be able to create a new project (name, url, description);
- [ ] It should be able to update a project (name, url, description);
- [ ] It should be able to delete a project;
### Billing
- [ ] It should be able to get billing details for organization ($20 per project / $10 per member excluding billing role);
## RBAC
Roles & permissions.
### Roles
- Owner (count as administrator)
- Administrator
- Member
- Billing (one per organization)
- Anonymous
### Permissions table
| | Administrator | Member | Billing | Anonymous |
| ------------------------ | ------------- | ------ | ------- | --------- |
| Update organization | ✅ | ❌ | ❌ | ❌ |
| Delete organization | ✅ | ❌ | ❌ | ❌ |
| Invite a member | ✅ | ❌ | ❌ | ❌ |
| Revoke an invite | ✅ | ❌ | ❌ | ❌ |
| List members | ✅ | ✅ | ✅ | ❌ |
| Transfer ownership | ⚠️ | ❌ | ❌ | ❌ |
| Update member role | ✅ | ❌ | ❌ | ❌ |
| Delete member | ✅ | ⚠️ | ❌ | ❌ |
| List projects | ✅ | ✅ | ✅ | ❌ |
| Create a new project | ✅ | ✅ | ❌ | ❌ |
| Update a project | ✅ | ⚠️ | ❌ | ❌ |
| Delete a project | ✅ | ⚠️ | ❌ | ❌ |
| Get billing details | ✅ | ❌ | ✅ | ❌ |
| Export billing details | ✅ | ❌ | ✅ | ❌ |
> ✅ = allowed
> ❌ = not allowed
> ⚠️ = allowed w/ conditions
#### Conditions
- Only owners may transfer organization ownership;
- Only administrators and project authors may update/delete the project;
- Members can leave their own organization;