Add different user authorization levels (moderator and admin) about vglist HOT 3 CLOSED

• Create a migration that adds a "privilege" enum (maybe come up with a better name: role or authorization_level?) to the User model.
• Have [:default, :admin] to start with, and have :default be the default (duh).
• Moderators and Admins can create/edit/delete platforms.
• Moderators and Admins can create/edit/delete genres.
• All users can create/edit games and releases, and delete releases.
• All users can create/edit/delete release purchases for themselves.
• All users can delete their own user accounts, but only admins can delete other users' accounts.

Maybe also have untrusted as a level that prevents the user from, e.g. creating/editing/deleting things for the first 24 hours since they signed up?

https://github.com/varvet/pundit#policy-namespacing

from vglist.

Some improvements in #61, started using policies in views and limiting genre policies based on user roles. Still need to add the ability to make other users mods/admins.

from vglist.

With #85 we can now make other users moderators/admins and take their role away, so I'm going to call this issue fully resolved.

from vglist.