Group invites Api

[pedro-gutierrez]

Is your feature request related to a problem? Please describe.

As a general practice we should probably avoid sharing data about users to other users unless they're in the same group or privileged since security is a concern and trust between different groups isn't a given.

Describe the solution you'd like

The simplest thing for now is the focus on group-to-group interactions. No need to show users in another group

Eg: - if you want to invite someone to a shipment or whatever then you can just invite the group. If the group accepts the invite then anyone in the group can access the shipment.

How we can implement this

• Implement createInvite, acceptInvite, rejectInvite graphql mutations.
• Implement an invites query that lists all pending invites for a given group.
• No email notifications for now.
• These queries and mutations would be only available to users that have the admin role in a given group.
• This assumes the list of available groups in the toolbox is public and discoverable, which is probably fine.