User Roles does not appear to work locally

[gpmarkyoung]

When running nhost locally via the CLI, user roles doesn't seem to populate.

However, the same installation online:

And the local nhost.toml contains:

And the local auth->roles contains:

The console has no errors in it, and it is sync'd with nhost.io.

[gpmarkyoung]

discord "help" for reference: https://discord.com/channels/552499021260914688/1196488618886316174

[dbarrosop]

Thanks for the report.

That is expected as that form is populated from the nhost.toml which the local dashboard can't read (yet). In the meantime you can manage roles in the database tab:

Which should allow you to "mark requests as":

[gpmarkyoung]

The auth->user_roles table is empty, and locked so I cannot alter user roles. How then do I populate it?

[dbarrosop]

🤦 that's a different bug, as a workaround of the workaround you can use the SQL editor:

You could also use graphql mutations if you want:

mutation {
  insertAuthRole(object: {
		role: "some-other-role"
  }) {
    role
  }
}

mutation {
  insertAuthUserRole(object: {
    userId: "f8e2c4c6-6f8a-448a-b1cd-5070a4c90328"
		role: "some-other-role"
  }) {
    id
    userId
    role
  }
}

[felixhagspiel]

@dbarrosop what is the workflow for adding new roles until this is fixed?

1. Manually add a new role on my local dev environment inside the auth.roles table & mark it as a migration
2. Push the migration to prod
3. As I understand, in the nhost dashboard the new role will not show in the auth tab after the deployment, so I have to manually create a new entry inside auth.user_roles

Is this the correct way?

[dbarrosop]

You shouldn't create roles in the database directly. For adding new roles you need to add them to settings, either the toml under:

[auth.user.roles]
default = 'user'
allowed = ['user', 'me', 'some-new-role']

or in the dashboard->settings->Roles and permissions.

[felixhagspiel]

Can`t believe I have missed that, thanks

[felixhagspiel]

@dbarrosop If I do that, then users that sign up get the staff role automatically, which is not what I want. I want to set the staff role only for some users. I assume this is not possible via those checkboxes / settings, but only by manually creating an entry in schem.auth -> user_roles and not setting the role in ... allowed = [... 'some-new-role']?

[dbarrosop]

Yes, that is correct. Apologies for the confusion. I thought you wanted a new default alowed role. If you just want the role for some users the procedure you described is correct.