feat: Users API, ownership transfer and removal of the legacy role string

test/media_purge_qa_test.go

@@ -15,16 +15,19 @@ import (
 )
 
 func TestPurgeRoleGuardIsAnAllowlist(t *testing.T) {
-	for _, role := range []string{"OWNER", "Admin", "superuser"} {
+	for _, unusable := range []struct {
+		name   string
+		roleID uint32
+	}{{"no role", 0}, {"missing role", 99}} {
 		for _, route := range []struct{ method, path string }{
 			{http.MethodGet, "/v1/media/purge-settings"},
 			{http.MethodPatch, "/v1/media/purge-settings"},
 			{http.MethodGet, "/v1/media/purge-preview"},
 			{http.MethodPost, "/v1/media/purge"},
 		} {
-			t.Run(role+" "+route.method+" "+route.path, func(t *testing.T) {
+			t.Run(unusable.name+" "+route.method+" "+route.path, func(t *testing.T) {
 				env := newPurgeEnv(t)
-				env.users.users[20] = user.User{ID: 20, Username: "other", IsVerified: true, Role: user.Role(role)}
+				env.users.users[20] = user.User{ID: 20, Username: "other", IsVerified: true, RoleID: unusable.roleID}
 
 				rec := env.send(t, route.method, route.path, "", 20)