feat(users): add roles APIs (#63)

* feat(kvstore): add namespace operations for bool

* feat(userstore): add methods for roles

* chore(multiusers): remove useless todo

* feat(multiusers): add apis for roles

* test(roles): add e2e tests for role APIs

* test(e2e/files): enable files tests

src/handlers/multiusers/handlers.go

@@ -176,7 +176,6 @@ func (h *MultiUsersSvc) AddUser(c *gin.Context) {
 		c.JSON(q.ErrResp(c, 400, err))
 		return
 	}
-	// TODO: check privilege?
 
 	// TODO: do more comprehensive validation
 	// Role and duplicated name will be validated by the store
@@ -209,6 +208,73 @@ func (h *MultiUsersSvc) AddUser(c *gin.Context) {
 	c.JSON(200, &AddUserResp{ID: fmt.Sprint(uid)})
 }
 
+type AddRoleReq struct {
+	Role string `json:"role"`
+}
+
+func (h *MultiUsersSvc) AddRole(c *gin.Context) {
+	req := &AddRoleReq{}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(q.ErrResp(c, 400, err))
+		return
+	}
+
+	// TODO: do more comprehensive validation
+	if len(req.Role) < 2 {
+		c.JSON(q.ErrResp(c, 400, errors.New("name length must be greater than 2")))
+		return
+	}
+
+	err := h.deps.Users().AddRole(req.Role)
+	if err != nil {
+		c.JSON(q.ErrResp(c, 500, err))
+		return
+	}
+
+	c.JSON(q.Resp(200))
+}
+
+type DelRoleReq struct {
+	Role string `json:"role"`
+}
+
+func (h *MultiUsersSvc) DelRole(c *gin.Context) {
+	req := &DelRoleReq{}
+	if err := c.ShouldBindJSON(&req); err != nil {
+		c.JSON(q.ErrResp(c, 400, err))
+		return
+	}
+
+	// TODO: do more comprehensive validation
+	if len(req.Role) < 2 {
+		c.JSON(q.ErrResp(c, 400, errors.New("name length must be greater than 2")))
+		return
+	}
+
+	err := h.deps.Users().DelRole(req.Role)
+	if err != nil {
+		c.JSON(q.ErrResp(c, 500, err))
+		return
+	}
+
+	c.JSON(q.Resp(200))
+}
+
+type ListRolesReq struct{}
+type ListRolesResp struct {
+	Roles map[string]bool `json:"roles"`
+}
+
+func (h *MultiUsersSvc) ListRoles(c *gin.Context) {
+	roles, err := h.deps.Users().ListRoles()
+	if err != nil {
+		c.JSON(q.ErrResp(c, 500, err))
+		return
+	}
+
+	c.JSON(200, &ListRolesResp{Roles: roles})
+}
+
 func (h *MultiUsersSvc) getUserInfo(c *gin.Context) (map[string]string, error) {
 	tokenStr, err := c.Cookie(TokenCookie)
 	if err != nil {