-
-
Notifications
You must be signed in to change notification settings - Fork 4.8k
Column level ACL -- Feature request #4850
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
I don’t see how column level ACL’s can be implemented at this time, but feel free to provide an example implementation and a tentative, after you run it in production for a while, we may consider the changes. |
TL;DR |
again, I suggest you come up with an initial implementation of this column ACL a concept, where to store the metadata for this feature etc... Also, you can reverse the relation, by adding a media column in the like object and you’re good security wise. In the afterSave of the like, you can add it in the media relation with the masterKey. Very little code and secure. |
Ok, I will if I get some time. |
Using the masterKey in the adterSave is only necessary if you model with a relation. If your likes all have a Media object pointer, and you query on the Likes, there is no need to add the like to a relation. Again, I am not against column based ACL’s but the justification for developing and supporting such feature is weak as it is possible to model the data in such way that is secure and easy with the current features. |
Issue Description
Support column level ACL to support use cases as described below.
Assume, there are 2 classes (collections)
Media
andLikes
. The association between them is1:n
. One media can have N number of likes.Here is some rules on
Media
collection:Media
record will have it's writtenACL
set tocreatedBy
user only.Media
record will have arelation
, saylikes
toLikes
collection.Steps to reproduce
Record M1
toMedia
collection fromUser A
Record L1
toLikes
collection fromUser B
masterKey
try to add the newly insertRecord L1
to thelikes
column inMedia
collection, fromUser B
Expected Results
Works as expected. This is more of a feature request
Actual Outcome
Hope to see column levels ACL supported.
Environment Setup
Server
Database
Logs/Trace
Include all relevant logs. You can turn on additional logging by configuring VERBOSE=1 in your environment.
The text was updated successfully, but these errors were encountered: