/Javascript/Node.js/Nodejs role based access control

Nodejs role based access control

Possible approach-> have role embedded in user collection/schema: users document shall have the following:

{
    _id : "email@mail.com",
    name: "lorem ipsum",
    role: "MAN"
}
As far as your post describes, only god can make and assign TODOs. Roles Collection may hold the following:

{
    _id : "MAN",
    globalPerm: [],
    privatePerm: [],
    assignedPerm: ["r","u"],
},
{
    _id : "SUPER_HERO",
    globalPerm: [],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
},
{
    _id : "GOD",
    globalPerm: ["c","r","u","d"],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
}
Node JS Middlewares After getting correct permission values for a user, you might want to use middlewares. Sample express HTTP request route:

app.post('/updateTodo', permissions.check('privatePerm', 'c'), function (req, res) {
 // do stuff
};

permissions.check is called before actually executing function body to update TODO.

Hence if a user tries to update a todo, it will first verify the corresponding permissions.

Source: stackoverflow.com

Similar codes

2 votes230 views1 answer
Check given path is valid or not in nodejs
Javascript Node.js
2 votes217 views1 answer
Node js mongodb update nested object
Javascript Node.js
4 votes225 views3 answers
413 payload too large nodejs
Javascript Node.js
0 vote215 views5 answers
Api uber eat node js
Javascript Node.js
62 votes263 views6 answers
Update nodejs ubuntu
Javascript Node.js
21 votes223 views2 answers
Nodejs check if file is running on server or client
Javascript Node.js
1 vote208 views1 answer
Nodejs download image from url
Javascript Node.js
5 votes213 views1 answer
Edit json via nodejs
Javascript Node.js
7 votes214 views6 answers
What is node js
Javascript Node.js
0 vote217 views1 answer
Upload file on node js azure function
Javascript Node.js