Add role assignment management endpoints

[Lakes41]

Difficulty: Hard

Type: Feature

Summary

Add authenticated API endpoints for assigning, updating, and removing member roles within a community. This is needed so admin clients can manage access rights without directly editing the database.

Current Behaviour

The API can evaluate roles during access checks and member listing, but there is no clear public API surface for role assignment management.

Expected Behaviour

Admins should be able to assign and revoke roles through validated API endpoints, with all changes scoped to a community and protected by authorisation checks.

Suggested Implementation

Add role mutation endpoints such as POST /v1/communities/:communityId/members/:wallet/roles and DELETE /v1/communities/:communityId/members/:wallet/roles/:role. Validate wallet, community, and role values. Ensure only authorised community admins can perform the action.

Files or Areas Likely Affected

• apps/access-api/src/routes.ts
• apps/access-api/src/services/memberService.ts
• apps/access-api/prisma/schema.prisma
• packages/shared-types/src/index.ts
• packages/sdk-lite/src/index.ts

Acceptance Criteria

• Admins can assign a supported role to a member
• Admins can remove a role from a member
• Duplicate role assignments are handled safely
• Unauthorised users receive 401 or 403 responses
• Invalid wallet, community, or role values return 400
• Tests cover assign, remove, duplicate, unauthorised, and invalid-input cases

Additional Notes

Assumption: role management belongs in the access API because roles directly affect policy decisions.

[ekwe7]

I would love to work on this issue. I have experience building production ready applications and collaborating through GitHub workflows. I'll carefully analyze the current implementation, propose a reliable solution, and submit a well-tested PR. My focus is on clean code, maintainability, and timely delivery

[ekwe7]

I would love to work on this issue. I have experience building production ready applications and collaborating through GitHub workflows. I'll carefully analyze the current implementation, propose a reliable solution, and submit a well-tested PR. My focus is on clean code, maintainability, and timely delivery

[clintjeff2]

Hello, I have 6 years of experience working on tasks like this and handling similar challenges across backend, frontend, and smart-contract development. I have carefully read and fully understood the task requirements, and I am confident I can deliver a clean, efficient, and well-tested solution promptly. I always ensure high-quality implementation, maintainability, and adherence to best practices.

Pull request in 5 hours.

[gloskull]

Hi, I’d love to work on this issue. I have 4 years of experience across backend, frontend, full-stack, and smart contract development. I understand the task clearly and can deliver a clean, efficient, well-tested solution on time, with strong focus on code quality and maintainability. My PR will be submitted in under 10 hours.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Official Campaign campaign!

@ekwe7's PR #70 was approved and merged by @Lakes41.

🏆 @ekwe7: You earned 40 FoxPoints for this contribution! Your current tier: Builder (2,631 total points). Track your full progress on GrantFox.

👏 Great work, @ekwe7! Keep contributing to Adamantine-guild.