Add read only role (#933)

Author: InfiniteStash

frontend/src/graphql/types.ts

@@ -1502,6 +1502,7 @@ export enum RoleEnum {
   MANAGE_INVITES = "MANAGE_INVITES",
   MODIFY = "MODIFY",
   READ = "READ",
+  READ_ONLY = "READ_ONLY",
   VOTE = "VOTE",
 }
 

graphql/schema/types/user.graphql

@@ -12,6 +12,7 @@ enum RoleEnum {
   """May grant and rescind invite tokens and resind invite keys"""
   MANAGE_INVITES
   BOT
+  READ_ONLY
   EDIT_TAGS
 }
 

pkg/models/generated_exec.go

@@ -520,6 +520,12 @@ func PromoteUserVoteRights(fac models.Repo, userID uuid.UUID, threshold int) err
 		return err
 	}
 
+	for _, role := range roles.ToRoles() {
+		if role == models.RoleEnumReadOnly {
+			return nil
+		}
+	}
+
 	hasVote := false
 	for _, role := range roles.ToRoles() {
 		if role.Implies(models.RoleEnumVote) {