- add change password endpoint
- Add company token to create users endpoint
Workflow should be
- Master user can create generic users
- Master User can create roles
- Master user can create companies
- When a company is created it will generate admin roles and system roles
- A system role doesnt expire
- A system role can regenerate his JWT
- A global list of users is accesible to master user
- Power users can add users to company
- a power user for the company has access to a list of users
- when creating a new user, you have an optional field that allows you the assign a user to a company by default
- when logged you will get the roles for the user filtered by he requesting company