Add role hierarchy and temporary assignments

[Lakes41]

Difficulty: Advanced

Type: Feature

Summary

Extend role handling so roles can have hierarchy and optional expiry timestamps. This supports time-limited contributors, elevated admins, and richer access rules.

Current Behaviour

Roles are treated as simple assignments such as member, contributor, and admin. There is no visible support for role hierarchy or temporary role assignment expiry.

Expected Behaviour

The policy engine and API should understand hierarchical roles and ignore expired role assignments when resolving effective permissions.

Suggested Implementation

Add optional expiresAt to role assignments and define role hierarchy semantics. Update resolveEffectiveRoles and policy evaluation to consider active role windows and inherited permissions.

Files or Areas Likely Affected

• apps/access-api/prisma/schema.prisma
• packages/policy-engine/src/index.ts
• packages/shared-types/src/index.ts
• apps/access-api/src/services/memberService.ts
• packages/policy-engine/test/

Acceptance Criteria

• Role assignments can optionally expire
• Expired role assignments do not grant access
• Admin can imply contributor/member permissions if hierarchy is enabled
• Role hierarchy behaviour is documented
• Tests cover temporary roles, expired roles, and inherited roles
• Existing simple role checks remain backwards-compatible

Additional Notes

Keep hierarchy explicit and predictable. Do not introduce arbitrary role graphs unless maintainers approve that model.

[Glam26]

I'd like to work on this issue.

I've implemented RBAC and permission systems with role inheritance, temporary access grants, expiration windows, and policy evaluation logic in production applications. This includes designing predictable role hierarchies, handling time-based permission expiry, maintaining backward compatibility, and building comprehensive test coverage around effective permission resolution.

For this issue, I'll extend the role model with optional expiration support while preserving existing behavior for non-expiring roles. I'll implement explicit hierarchy rules (for example, admin → contributor → member), update effective-role resolution and policy evaluation to ignore expired assignments, and ensure inherited permissions remain transparent and easy to reason about. I'll also add documentation and test coverage for temporary roles, expiration boundaries, inherited permissions, and legacy role checks to guarantee a safe rollout.

[David-patrick-chuks]

Hello, I’ve thoroughly read the issue description and understand the expected outcome. I’d love to work on it.

[samueloyibodevv]

Hi, I'd like to work on this issue. I've gone through the description and acceptance criteria and I'm confident I can deliver it. I'll make sure every acceptance criterion is met and submit a clean, tested PR. Please assign it to me.

[clintjeff2]

Hello, I have 6 years of experience working on tasks like this and handling similar challenges across backend, frontend, and smart-contract development. I have carefully read and fully understood the task requirements, and I am confident I can deliver a clean, efficient, and well-tested solution promptly. I always ensure high-quality implementation, maintainability, and adherence to best practices.

Pull request in 5 hours.

[Kappa16]

Please maintainer..I can handle this professionally and make sure this issue is closed ASAP WITHOUT ERRORS.

[grantfox-oss]

🦊 GrantFox — @clintjeff2 has been assigned to this issue as part of the Official Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #55)
2. Your PR will be reviewed by the Adamantine-guild maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Official Campaign campaign!

@clintjeff2's PR #74 was approved and merged by @Lakes41.

🏆 @clintjeff2: You earned 45 FoxPoints for this contribution! Your current tier: Specialist (5,306 total points). Track your full progress on GrantFox.

👏 Great work, @clintjeff2! Keep contributing to Adamantine-guild.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox!

@clintjeff2's PR #77 was approved and merged by @Lakes41.

🏆 @clintjeff2: You earned 45 FoxPoints for this contribution! Your current tier: Specialist (5,981 total points). Track your full progress on GrantFox.

👏 Great work, @clintjeff2! Keep contributing to Adamantine-guild.