FEAT: New Roles > Department Admin and Facility Admin

[jtucholski]

Description

Adjust permissions for Facility Admins and Department Admins to enforce proper facility-level restrictions. Facility Admins should only manage accounts within their assigned facility, while Department Admins retain the ability to oversee multiple facilities.

User Stories

1. Facility Admin Restrictions

• As a Facility Admin, I want my access restricted to actions and data for my assigned facility, so I cannot manage other facilities.

2. Department Admin Permissions

• As a Department Admin, I want to switch between facilities using the dropdown, so I can manage accounts and view data across multiple facilities.

Acceptance Criteria

• Facility Admins:
  • Dropdown in the top-right corner is disabled (similar to how it performs for Residents) and shows the name of the assigned facility.
  • Actions (e.g., add or manage users) are restricted to their assigned facility.
  • Facility Admins can no longer access the Facilities page to create, edit, or delete Facilities.
• Department Admins:
  • Dropdown remains active and allows for different facilities to be selected.
  • Permissions remain unchanged for managing users and data across all facilities.

Extra context

• This ticket breaks up the existing Admin role into two new roles: Department Admin and Facility Admin and I don't believe there is a need for an "Admin" role beyond that.
• Before starting on this look into any other related tickets that are open for Roles & Permissions to see if there's overlap.
• We should factor into consideration whether we permit/block features by role ("Department Admin", "Facility Admin") or permission ("Switch Facility", "Create Resident", etc.).
• When we create Users they are assigned a Facility. That means we need to determine where to assign Department-wide Admins