memi-board 0.5.0 → 0.7.0

package/dist/runtime/components/Users.vue

@@ -0,0 +1,64 @@
+<script setup lang="ts">
+import { computed, ref } from 'vue'
+import { useMemiBoardAuth } from '../composables/useMemiBoardAuth'
+import { BOARD_USER_ROLES, useMemiBoardUsers } from '../composables/useMemiBoardUsers'
+import type { BoardUserRole } from '../types'
+
+const props = withDefaults(defineProps<{ authorized?: boolean }>(), { authorized: false })
+const { isAdmin, rolePending } = useMemiBoardAuth()
+const { users, usersPending, updateUserRole } = useMemiBoardUsers()
+const canManage = computed(() => isAdmin.value || props.authorized)
+const savingUid = ref<string | null>(null)
+const savedUid = ref<string | null>(null)
+const error = ref('')
+
+async function changeRole(uid: string, role: BoardUserRole) {
+  if (!canManage.value) return
+  savingUid.value = uid
+  savedUid.value = null
+  error.value = ''
+  try {
+    await updateUserRole(uid, role)
+    savedUid.value = uid
+  }
+  catch (cause) {
+    error.value = cause instanceof Error ? cause.message : '역할을 변경하지 못했습니다.'
+  }
+  finally {
+    savingUid.value = null
+  }
+}
+</script>
+
+<template>
+  <div class="flex flex-col gap-6">
+    <div class="grid gap-3 md:grid-cols-3">
+      <UAlert v-for="item in BOARD_USER_ROLES" :key="item.value" color="neutral" variant="subtle" :title="item.label" :description="item.description" />
+    </div>
+    <UAlert v-if="error" color="error" variant="subtle" icon="i-lucide-circle-alert" :description="error" />
+    <div v-if="rolePending || usersPending" class="py-12 text-center text-sm text-muted">사용자 목록을 불러오고 있습니다.</div>
+    <UAlert v-else-if="!canManage" color="error" variant="subtle" icon="i-lucide-shield-alert" title="권한이 없습니다" description="게시판 관리자만 사용자 역할을 관리할 수 있습니다." />
+    <div v-else-if="users.length === 0" class="py-12 text-center text-sm text-muted">게시판에 로그인한 사용자가 없습니다.</div>
+    <div v-else class="divide-y divide-default rounded-lg border border-default">
+      <div v-for="boardUser in users" :key="boardUser.id" class="grid gap-4 p-4 md:grid-cols-[minmax(0,1fr)_12rem] md:items-center">
+        <div class="min-w-0">
+          <div class="flex items-center gap-2">
+            <p class="truncate font-medium text-highlighted">{{ boardUser.displayName || '이름 없음' }}</p>
+            <UBadge v-if="savedUid === boardUser.id" color="success" variant="subtle" label="저장됨" />
+          </div>
+          <p class="truncate text-sm text-muted">{{ boardUser.email || boardUser.id }}</p>
+          <p v-if="boardUser.moderationBlockCount" class="mt-1 text-xs text-warning">콘텐츠 경고 {{ boardUser.moderationBlockCount }}회</p>
+        </div>
+        <USelect
+          :model-value="boardUser.role || 'user'"
+          :items="BOARD_USER_ROLES"
+          value-key="value"
+          label-key="label"
+          :loading="savingUid === boardUser.id"
+          :disabled="savingUid === boardUser.id"
+          @update:model-value="changeRole(boardUser.id, $event as BoardUserRole)"
+        />
+      </div>
+    </div>
+  </div>
+</template>

package/dist/types.d.ts

@@ -57,10 +57,18 @@ export interface CommentModel {
     moderationStatus: ModerationStatus;
     createdAt: Timestamp;
 }
-export interface BoardUserRole {
-    role: 'user' | 'admin';
+export type BoardUserRole = 'admin' | 'staff' | 'user';
+export interface BoardUserModel {
+    id: string;
+    role: BoardUserRole;
+    displayName?: string | null;
+    email?: string | null;
+    photoURL?: string | null;
+    moderationBlockCount?: number;
+    updatedAt?: Timestamp;
 }
 export type BoardListView = 'default' | 'image' | 'video';
+export type BoardWriteRole = 'user' | 'staff' | 'admin';
 export interface BoardCategory {
     /** 글의 category 필드가 참조하는 키 (예: 'notice', 'free') */
     id: string;
@@ -68,6 +76,8 @@ export interface BoardCategory {
     label: string;
     /** 목록 표시 방식. 미지정된 기존 데이터는 default. */
     listView?: BoardListView;
+    /** 글쓰기 최소 역할. 미지정된 기존 데이터는 user. */
+    writeRole?: BoardWriteRole;
     /** 목록 노출 순서. 서브컬렉션 문서의 정렬 필드. */
     order?: number;
 }

package/docs/firestore.rules.example

@@ -19,6 +19,18 @@ service cloud.firestore {
       return isSignedIn() &&
         get(/databases/$(database)/documents/memiBoardUsers/$(request.auth.uid)).data.role == 'admin';
     }
+    function isStaff() {
+      return isSignedIn() &&
+        get(/databases/$(database)/documents/memiBoardUsers/$(request.auth.uid)).data.role in ['admin', 'staff'];
+    }
+    function canWriteCategory(categoryId) {
+      let categoryPath = /databases/$(database)/documents/memiBoardSettings/config/categories/$(categoryId);
+      let requiredRole = get(categoryPath).data.get('writeRole', 'user');
+      return exists(categoryPath)
+        && (requiredRole == 'user'
+          || (requiredRole == 'staff' && isStaff())
+          || (requiredRole == 'admin' && isAdmin()));
+    }
     function isOwner(resource) {
       return isSignedIn() && request.auth.uid == resource.data.authorUid;
     }
@@ -28,14 +40,16 @@ service cloud.firestore {
 
       allow create: if isSignedIn()
         && request.resource.data.authorUid == request.auth.uid
-        && request.resource.data.moderationStatus == 'approved';
+        && request.resource.data.moderationStatus == 'approved'
+        && request.resource.data.category is string
+        && canWriteCategory(request.resource.data.category);
 
-      // 작성자 본인 또는 관리자만 수정/삭제 가능
-      allow update, delete: if isOwner(resource) || isAdmin();
+      // 작성자 본인 또는 관리자·스태프만 수정/삭제 가능
+      allow update, delete: if isOwner(resource) || isStaff();
 
       match /body/{docId} {
         allow read: if true;
-        allow write: if isOwner(get(/databases/$(database)/documents/memiBoardPosts/$(postId))) || isAdmin();
+        allow write: if isOwner(get(/databases/$(database)/documents/memiBoardPosts/$(postId))) || isStaff();
       }
 
       match /comments/{commentId} {
@@ -49,7 +63,7 @@ service cloud.firestore {
         // 부모 글을 삭제할 때 작성자가 다른 사용자의 댓글도 함께 정리할 수 있어야 한다.
         allow delete: if isOwner(resource)
           || isOwner(get(/databases/$(database)/documents/memiBoardPosts/$(postId)))
-          || isAdmin();
+          || isStaff();
 
         // 댓글 수정은 지원하지 않는다 (삭제 후 재작성만 가능) — Editor에서 UI 자체도 제공하지 않음
         allow update: if false;
@@ -57,19 +71,17 @@ service cloud.firestore {
     }
 
     // 게시판 역할 문서.
-    // 본인은 role:'user'로만 생성/유지할 수 있고, 자기 role을 'admin'으로 바꿀 수 없다.
-    // 관리자 승격은 Firebase 콘솔에서 해당 uid 문서의 role 필드를 직접 'admin'으로 바꿔야 한다
-    // (이 모듈은 관리자 승격 UI를 제공하지 않는다).
+    // 본인은 role:'user'로만 생성하며, admin은 Users UI에서 admin/staff/user를 변경한다.
     // moderationBlockCount/At: 검열 차단 누적(+1만). 감소·리셋은 admin.
     match /memiBoardUsers/{uid} {
-      allow read: if isSignedIn();
+      allow read: if isAdmin() || (isSignedIn() && request.auth.uid == uid);
       allow create: if isSignedIn()
         && request.auth.uid == uid
         && request.resource.data.role == 'user'
         && (!('moderationBlockCount' in request.resource.data)
             || request.resource.data.moderationBlockCount == 0
             || request.resource.data.moderationBlockCount == 1);
-      allow update: if isAdmin()
+      allow update: if (isAdmin() && request.resource.data.role in ['admin', 'staff', 'user'])
         || (isSignedIn()
           && request.auth.uid == uid
           && request.resource.data.role == resource.data.role
@@ -94,9 +106,10 @@ service cloud.firestore {
       match /categories/{categoryId} {
         allow read: if true;
         allow create, update: if isAdmin()
-          && request.resource.data.keys().hasOnly(['label', 'listView', 'order', 'updatedAt'])
+          && request.resource.data.keys().hasOnly(['label', 'listView', 'writeRole', 'order', 'updatedAt'])
           && request.resource.data.label is string
           && request.resource.data.listView in ['default', 'image', 'video']
+          && request.resource.data.writeRole in ['user', 'staff', 'admin']
           && request.resource.data.order is number;
         allow delete: if isAdmin();
       }

package/docs/storage.rules.example

@@ -12,9 +12,9 @@ service firebase.storage {
     function isSignedIn() {
       return request.auth != null;
     }
-    function isAdmin() {
+    function isStaff() {
       return isSignedIn() &&
-        firestore.get(/databases/(default)/documents/memiBoardUsers/$(request.auth.uid)).data.role == 'admin';
+        firestore.get(/databases/(default)/documents/memiBoardUsers/$(request.auth.uid)).data.role in ['admin', 'staff'];
     }
     function postExists(postId) {
       return firestore.exists(/databases/(default)/documents/memiBoardPosts/$(postId));
@@ -28,9 +28,9 @@ service firebase.storage {
       allow read: if true;
       // uploadBytesResumable → create + 청크 update 필요 (write)
       allow write: if isSignedIn()
-        && (!postExists(postId) || isPostOwner(postId) || isAdmin())
+        && (!postExists(postId) || isPostOwner(postId) || isStaff())
         && request.resource.size < 20 * 1024 * 1024;
-      allow delete: if isSignedIn() && (!postExists(postId) || isPostOwner(postId) || isAdmin());
+      allow delete: if isSignedIn() && (!postExists(postId) || isPostOwner(postId) || isStaff());
     }
 
     // 에디터 본문 이미지 + 썸네일
@@ -39,10 +39,10 @@ service firebase.storage {
     match /memiBoard/posts/{postId}/images/{allPaths=**} {
       allow read: if true;
       allow write: if isSignedIn()
-        && (!postExists(postId) || isPostOwner(postId) || isAdmin())
+        && (!postExists(postId) || isPostOwner(postId) || isStaff())
         && request.resource.size < 5 * 1024 * 1024
         && request.resource.contentType.matches('image/(jpeg|png|webp|gif|jpg)');
-      allow delete: if isSignedIn() && (!postExists(postId) || isPostOwner(postId) || isAdmin());
+      allow delete: if isSignedIn() && (!postExists(postId) || isPostOwner(postId) || isStaff());
     }
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "memi-board",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "type": "module",
   "description": "Firebase 게시판 — core composable + thin Nuxt module(UI SFC). Nuxt 4 + Nuxt UI 호스트에 붙임",
   "license": "MIT",