avoid introspection to get available roles as admin

backend/src/middleware/permissionsMiddleware.js

@@ -122,6 +122,7 @@ export default shield(
       MyInviteCodes: isAuthenticated,
       isValidInviteCode: allow,
       queryLocations: isAuthenticated,
+      availableRoles: isAdmin,
     },
     Mutation: {
       '*': deny,

backend/src/schema/resolvers/roles.js

@@ -0,0 +1,7 @@
+export default {
+  Query: {
+    availableRoles: async (_parent, args, context, _resolveInfo) => {
+      return ['admin', 'moderator', 'user']
+    },
+  },
+}

backend/src/schema/types/enum/UserGroup.gql

@@ -2,4 +2,4 @@ enum UserGroup {
   admin
   moderator
   user
-}
+}

backend/src/schema/types/type/User.gql

@@ -170,6 +170,7 @@ type Query {
   filter: _UserFilter
   ): [User]
 
+  availableRoles: [UserGroup]! 
   mutedUsers: [User]
   blockedUsers: [User]
   isLoggedIn: Boolean!

webapp/graphql/admin/Roles.js

@@ -3,12 +3,7 @@ import gql from 'graphql-tag'
 export const FetchAllRoles = () => {
   return gql`
     query {
-      __type(name: "UserGroup") {
-        name
-        enumValues {
-          name
-        }
-      }
+      availableRoles
     }
   `
 }

webapp/pages/admin/users.vue

@@ -178,8 +178,8 @@ export default {
       query() {
         return FetchAllRoles()
       },
-      update({ __type }) {
-        return __type.enumValues.map((item) => item.name)
+      update({ availableRoles }) {
+        return availableRoles
       },
     },
   },