Implement an API call for changing user role
We like to have a way to change the role of an user, e.g. form CONTRIBUTOR to MODERATOR. I guess an API call would be necessary, it is only unclear, how we handle the permissions:
- Either only administrators are allowed to change the role of users
- or every user role can change the role of a user that has a lower role (e.g. MODERATORS are allowed to push the role of a CONTRIBUTOR to MODERATOR but not to and for ADMINISTRATOR)
I guess the easier one is the first, that user permission handling is only managed by administrators. What is your opinion on this? @matej.durco @lbarbot @mkozak @swolarz @stefan.probst