User Authorisation/Permissions

[erthium]

We need to decently hold the data for which users can access which raffles or edit them.

For starters, we can hold the raffle IDs that the user has access to in the database with the user information.

Then we can create a simple system that checks if the logged user has access to that raffle.

Normally, only accessible raffle will be showed in the user panel, but we need to consider the case where the user tries to visit the edit/control page of the raffle which they are not authorised to. In the client side, we need to check if the user has access before loading the page.

For beginning, we do not have to create other permissions that access. So only using IDs in the database should be enough.