Multi User Auth

[Yijia-Z]

Backend API Endpoints

• Create endpoint for getting thread permissions
• Create endpoint for adding user to thread
• Create endpoint for removing user from thread
• Create endpoint for updating user permissions
• Update thread fetch endpoint to check permissions
• Update thread message endpoints to verify permissions

Permission Management UI

• Create share button/modal component
• Implement user search/autocomplete in sharing modal
• Add permission level dropdown (owner, editor, viewer)
• Display current thread members and their permissions
• Add remove user functionality
• Add permission change functionality

Access Control Logic

• Implement middleware for checking thread access
• Define permission levels and their capabilities
  • Owner: Full control (can edit, delete, manage permissions)
  • Editor: Can read and write messages
  • Viewer: Can only read messages
• Handle transfer of ownership