53f0d6320e
Co-Authored-By: kotte <14197736+mrtamagotchi@users.noreply.github.com> Co-Authored-By: mikaeltellhed <2311083+mikaeltellhed@users.noreply.github.com> Co-Authored-By: Tore Knudsen <18231882+torekndsn@users.noreply.github.com> Co-Authored-By: Michael Cartner <32543275+michaelcartner@users.noreply.github.com>
3.0 KiB
Access Control Rules
When creating and updating records you can also specify access control rules. By default all records created can be read and written by everyone, they are completely public. This is convenient in the beginning when you are working on your applications but as you want to make it publicly available you need to think about access control. You do this by adding access control rules when creating or updating records.
You can have as many rules as you want. Each rule has a Target which can be one of User, Everyone or Role:
- User implies that this rule will target a specific user, you can either specify the User Id (that is the record Id for the user record) for the user or if omitted the current logged in user will be used.
- Everyone means, well, this rule applies to everyone. You can use to to create read only objects, that can be publicly read but not written.
- Role means that this object can be accessed as you specify by anyone belonging to a certain role. Please look at the access control guide for more information.
All rules have the inputs Read and Write when you specify if the users targeted by the role have read / write access.
Each rule can, depending on the selected Target type have the following inputs (it's a good idea to change the label of your rule as in the image above to easier find the inputs when connecting):
| Data | Description |
|---|---|
| User Id | The User Id of the user that the rule should apply to. If none is provided via a connection the currently logged in user will be used. This input is only available if the User target type is selected. |
| Role | The Role Name of the role that the rule should apply to. This input is only available if the Role target type is selected. |
| Write | Set to true for this rule to have write access. |
| Read | Set to true for this rule to have read access. |