Erste brauchbare Version

collections/Users.ts

@@ -0,0 +1,89 @@
+import { type CollectionConfig, type AccessArgs } from 'payload';
+
+function isSelfOrAdmin({ req }: AccessArgs) {
+	if (req.user?.role === 'superadmin')
+		return true;
+
+	if (req.user?.role === 'admin')
+		return {
+			id: {
+				equals: req.user?.id
+			}
+		};
+
+	return false;
+}
+
+export const Users: CollectionConfig = {
+	slug: 'users',
+
+	labels: {
+		singular: 'Benutzer',
+		plural: 'Benutzer'
+	},
+
+	admin: {
+		useAsTitle: 'fullName',
+		group: 'System',
+		description: 'Benutzer verwalten',
+		defaultColumns: [ 'id', 'fullName', 'email', 'role' ],
+		hideAPIURL: true
+	},
+
+	access: {
+		read: isSelfOrAdmin,
+		create: ({ req }) => req.user?.role === 'superadmin',
+		update: isSelfOrAdmin,
+		delete: ({ req }) => req.user?.role === 'superadmin'
+	},
+
+	auth: true,
+
+	fields: [
+		{
+			name: 'firstName',
+			label: 'Vorname',
+			type: 'text',
+			required: true
+		},
+		{
+			name: 'lastName',
+			label: 'Nachname',
+			type: 'text',
+			required: true
+		},
+		{
+			name: 'role',
+			label: 'Rolle',
+			type: 'select',
+			required: true,
+			access: {
+				update: ({ req }) => req.user?.role === 'superadmin'
+			},
+			options: [
+				{
+					label: 'Super-Admin (GSH)',
+					value: 'superadmin'
+				},
+				{
+					label: 'Administrator',
+					value: 'admin'
+				}
+			]
+		},
+		{
+			name: 'fullName',
+			label: 'Name',
+			type: 'text',
+			admin: {
+				hidden: true,
+				readOnly: true
+			},
+			hooks: {
+				beforeChange: [
+					({ data }) => `${data?.firstName} ${data?.lastName}`
+				]
+			}
+		}
+	]
+};