/Javascript/Node.js/Nodejs role based access control

Nodejs role based access control

Possible approach-> have role embedded in user collection/schema: users document shall have the following:

{
    _id : "email@mail.com",
    name: "lorem ipsum",
    role: "MAN"
}
As far as your post describes, only god can make and assign TODOs. Roles Collection may hold the following:

{
    _id : "MAN",
    globalPerm: [],
    privatePerm: [],
    assignedPerm: ["r","u"],
},
{
    _id : "SUPER_HERO",
    globalPerm: [],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
},
{
    _id : "GOD",
    globalPerm: ["c","r","u","d"],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
}
Node JS Middlewares After getting correct permission values for a user, you might want to use middlewares. Sample express HTTP request route:

app.post('/updateTodo', permissions.check('privatePerm', 'c'), function (req, res) {
 // do stuff
};

permissions.check is called before actually executing function body to update TODO.

Hence if a user tries to update a todo, it will first verify the corresponding permissions.

Source: stackoverflow.com

Similar codes

3 votes315 views2 answers
Socket.io client send data node js server
Javascript Node.js
1 vote145 views1 answer
Node js check if a user exists in mysql
Javascript Node.js
3 votes147 views1 answer
Windows 10 toast notifications nodejs
Javascript Node.js
0 vote150 views1 answer
How to use a fixed time zone in nodejs
Javascript Node.js
1 vote147 views1 answer
Create unique transaction ids nodejs
Javascript Node.js
9 votes151 views4 answers
Node get unix timestamp
Javascript Node.js
1 vote149 views1 answer
Move file from one folder to another in aws s3 nodejs
Javascript Node.js
1 vote149 views1 answer
How to delete the last part of a string in node js
Javascript Node.js
3 votes149 views2 answers
Nodejs how to use await in foreach loop
Javascript Node.js
0 vote146 views1 answer
Shopify functions nodejs
Javascript Node.js