Adds manager type, blocks certain permissions

src/clj/auto_ap/graphql/clients.clj

@@ -5,10 +5,6 @@
             [auto-ap.graphql.utils :refer [->graphql assert-admin can-see-client?]]
             [clojure.string :as str])) 
 
-#_(def role->datomic-role {":none" :user-role/none
-                         ":admin" :user-role/admin
-                         ":user" :user-role/user})
-
 (defn assert-client-code-is-unique [code]
   (when (seq (d/query {:query {:find '[?id]
                                :in ['$ '?code]

src/clj/auto_ap/graphql/users.clj

@@ -6,6 +6,7 @@
 
 (def role->datomic-role {":none" :user-role/none
                          ":admin" :user-role/admin
+                         ":manager" :user-role/manager
                          ":user" :user-role/user})
 
 (defn edit-user [context {:keys [edit_user] :as args} value]

src/clj/auto_ap/graphql/utils.clj

@@ -72,7 +72,7 @@
     (= (:user/role id) "admin")
     nil
 
-    (= (:user/role id) "user")
+    (#{"manager" "user"} (:user/role id))
     (:user/clients id [])))
 
 (defn result->page [results result-count key args]

src/clj/auto_ap/graphql/vendors.clj

@@ -11,7 +11,11 @@
 (defn upsert-vendor [context {{:keys [id name hidden terms code print_as primary_contact secondary_contact address default_account_id invoice_reminder_schedule terms_overrides account_overrides] :as in} :vendor} value]
   (when id
     (assert-admin (:id context)))
-  (let [terms-overrides (mapv
+  (let [hidden (if (is-admin? (:id context))
+                 hidden
+                 false)
+
+        terms-overrides (mapv
                         (fn [to]
                           (cond-> 
                               #:vendor-terms-override {:client (:client_id to)