/Javascript/Node.js/Nodejs role based access control

Nodejs role based access control

Possible approach-> have role embedded in user collection/schema: users document shall have the following:

{
    _id : "email@mail.com",
    name: "lorem ipsum",
    role: "MAN"
}
As far as your post describes, only god can make and assign TODOs. Roles Collection may hold the following:

{
    _id : "MAN",
    globalPerm: [],
    privatePerm: [],
    assignedPerm: ["r","u"],
},
{
    _id : "SUPER_HERO",
    globalPerm: [],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
},
{
    _id : "GOD",
    globalPerm: ["c","r","u","d"],
    privatePerm: ["c","r","u","d"],
    assignedPerm: ["c","r","u","d"],
}
Node JS Middlewares After getting correct permission values for a user, you might want to use middlewares. Sample express HTTP request route:

app.post('/updateTodo', permissions.check('privatePerm', 'c'), function (req, res) {
 // do stuff
};

permissions.check is called before actually executing function body to update TODO.

Hence if a user tries to update a todo, it will first verify the corresponding permissions.

Source: stackoverflow.com

Similar codes

0 vote322 views1 answer
Manage nodejs versions on windows
Javascript Node.js
6 votes311 views2 answers
Nodejs get current directory
Javascript Node.js
0 vote311 views1 answer
Nodejs console.log timestampt
Javascript Node.js
1 vote326 views2 answers
Create file if not exists nodejs
Javascript Node.js
0 vote331 views2 answers
Call node js function from javascript
Javascript Node.js
8 votes327 views1 answer
How to split index.js to routes nodejs
Javascript Node.js
6 votes288 views1 answer
Twilio npm send sms
Javascript Node.js
0 vote347 views1 answer
Nodejs on exit event
Javascript Node.js
1 vote312 views1 answer
Sendgrid nodejs send email template
Javascript Node.js
1 vote303 views1 answer
File type node js
Javascript Node.js