Skip to content

DatabasesWeb

How do I Update the permissions of a document, that I created In the Cloud?

Dec 27, 2023, 20:34

View on Discord

Votes

0

Replies

13

Participants

Unknown

Messages

14

aaronksaundersOriginal post

Rank 2: Process

Jul 3, 2023, 20:41

I am using appwrite.cloud.io

i have created a document... and now I want to give other users access to that document. The selectedItems prop is a list of users that I want to give access to the document.

Thanks

await appwrite.databases.updateDocument(
  import.meta.env.VITE_APPWRITE_DB,
  import.meta.env.VITE_COLLECTION,
  routeParams.id as string,
  {
    members: currentMembers.concat(selectedItems.map((i) => i.$id)),
  },
  selectedItems.map((i) => Permission.read(Role.user(i.$id)))
);

is there something I am missing or can this not be done

Summary

The user wants to update the permissions of a document they created in the cloud. The user is trying to use the cloud function route and the server SDK with an API key. However, they discover that they cannot assign a permission they don't have. It is unclear from the documentation what can be updated in the permissions. The user also wants to know how to force a user on a team using the server API. There is a 10 person limit in an hour and the user is dealing with the additional complexity of deep-linking to get the member accepted to the team. Finally, the user asks how to update the permissions of a document

aaronksaunders

Rank 2: Process

Jul 3, 2023, 21:11

How do I Update the permissions of a document, that I created In the Cloud?

Drake

Jul 4, 2023, 00:02

If a user wants to share access to a document, they must create a team, grant that team access, and then invite users to the team. This is to help prevent a user from forcing another user to access something they don't want.

Otherwise, you can use a server SDK to force a user into a team

aaronksaunders

Rank 2: Process

Jul 4, 2023, 00:04

the problem is that you are limited to 10 team requests an hour, also this is for a mobile app so then we introduce the additional lift of dealing with deep-linking to get the member accepted to the team

aaronksaunders

Rank 2: Process

Jul 4, 2023, 00:04

the bigger issue is the 10 person limit in an hour

aaronksaunders

Rank 2: Process

Jul 4, 2023, 00:06

i think there probably are better way to prevent the abuse, if i have created an app and you sign up and i use your userid to add you to a team i dont see that as being abusive

aaronksaunders

Rank 2: Process

Jul 4, 2023, 00:06

but... it is what it is, how do I force a user on a team using the server API... do I just make the same call but from the server?

Drake

Jul 4, 2023, 00:11

Exactly, same call

aaronksaunders

Rank 2: Process

Jul 4, 2023, 01:15

So there is no ability to change permissions on a document after it is created? Or you can only change permission on a document if the permission is based on the owner of the document? It is not clear in the documentation what can be updated in the permissions

Drake

Jul 4, 2023, 01:21

Yes, permissions can be updated, but a user cannot assign a permission they don't have. user:another_users_id is a permission the user doesn't have

aaronksaunders

Rank 2: Process

Jul 4, 2023, 01:23

Can the node.js api assign permissions?

aaronksaunders

Rank 2: Process

Jul 4, 2023, 01:24

With an API key that has the scope

Drake

Jul 4, 2023, 01:24

Server SDK with API key bypasses the restrictions

aaronksaunders

Rank 2: Process

Jul 4, 2023, 01:25

I will try the cloud function route

Join the discussion

Reply to this thread by joining our Discord.

Reply on Discord

Need support?_

Join Discord Get premium support