/Javascript/Node.js/Nodejs role based access control

Nodejs role based access control

Possible approach-> have role embedded in user collection/schema: users document shall have the following:

{
    _id : "email@mail.com",
    name: "lorem ipsum",
    role: "MAN"
}
As far as your post describes, only god can make and assign TODOs. Roles Collection may hold the following:

{
    _id : "MAN",
    globalPerm: [],
    privatePerm: [],
    assignedPerm: ["r","u"],
},
{
    _id : "SUPER_HERO",
    globalPerm: [],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
},
{
    _id : "GOD",
    globalPerm: ["c","r","u","d"],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
}
Node JS Middlewares After getting correct permission values for a user, you might want to use middlewares. Sample express HTTP request route:

app.post('/updateTodo', permissions.check('privatePerm', 'c'), function (req, res) {
 // do stuff
};

permissions.check is called before actually executing function body to update TODO.

Hence if a user tries to update a todo, it will first verify the corresponding permissions.

Source: stackoverflow.com

Similar codes

4 votes166 views3 answers
Node js kill port
Javascript Node.js
25 votes192 views2 answers
Updating node js ubuntu
Javascript Node.js
0 vote172 views1 answer
Node express chat app
Javascript Node.js
0 vote171 views1 answer
Css errors in node js server
Javascript Node.js
0 vote179 views2 answers
Delete dir nodejs
Javascript Node.js
0 vote169 views1 answer
Node js create or check directory
Javascript Node.js
35 votes204 views3 answers
Export function node js
Javascript Node.js
31 votes186 views4 answers
Nodejs check if variable is undefined
Javascript Node.js
0 vote163 views10 answers
Node js firebird example
Javascript Node.js
25 votes193 views3 answers
Node check if file exists
Javascript Node.js