How to make a personal account for a user?

Question

Software design

I'm making a regular todo list with authorization -> create/edit/delete tasks.
question: how can I implement so that there are two roles: admin and user
user - can create and see only his own tasks
admin - can see all user tasks?

was used: spring botot, Security, thymeleaf, Postgres

Answer 1

It's not very clear what the problem is. The user (and admin) has an id (and if there are user groups, then the id of the user group). Depending on this id, in the query from the database we must select only tasks with our user id in the creator field, or all tasks if it is admin.