feat: more role backend and admin/writer roles additions and adjustments

test/site_activity_acceptance_test.go

@@ -124,7 +124,7 @@ func TestSitesActivityLog(t *testing.T) {
 			{"PATCH /v1/site/999 as the owner", apiKeyOwnerId, http.MethodPatch, "/v1/site/999", `{"name": "X"}`},
 			{"DELETE /v1/site/999 as the owner", apiKeyOwnerId, http.MethodDelete, "/v1/site/999", ""},
 			{"POST /v1/site/ with an unknown image", apiKeyOwnerId, http.MethodPost, "/v1/site/", `{"name": "Other", "key": "other", "base_url": "https://other.example.com", "default_social_image_id": 999}`},
-			{"POST /v1/site/ as an admin (403)", apiKeyDevId, http.MethodPost, "/v1/site/", `{"name": "Shop", "key": "shop", "base_url": "https://shop.example.com"}`},
+			{"POST /v1/site/ as a writer (403)", siteWriterID, http.MethodPost, "/v1/site/", `{"name": "Shop", "key": "shop", "base_url": "https://shop.example.com"}`},
 			{"POST /v1/site/ with no credentials (401)", 0, http.MethodPost, "/v1/site/", `{"name": "Shop", "key": "shop", "base_url": "https://shop.example.com"}`},
 			{"PATCH /v1/site/abc as the owner", apiKeyOwnerId, http.MethodPatch, "/v1/site/abc", `{"name": "X"}`},
 			{"POST /v1/site/ with a malformed body", apiKeyOwnerId, http.MethodPost, "/v1/site/", "{not json"},
@@ -132,6 +132,7 @@ func TestSitesActivityLog(t *testing.T) {
 		for _, c := range cases {
 			t.Run(c.request, func(t *testing.T) {
 				e := newSiteEnvWithShop(t)
+				e.addUser(siteWriterID, "", writerRoleID, true)
 				e.as(t, c.as, c.method, c.path, c.body)
 				e.noEvent(t)
 			})