Is it possible to have Access Control hierachly in appwrite
How can I archive the access control algorithm or helper below conditions.
Here below is the scenario.
It should be like this.
User1A, 1B, 1C have Manager UserM1
User2A, 2B have Manager UserM2
User3A has Manager UserM3
UserM1 has Manager UserMM1
UserM2,M3 has Manager UserMM2
UserMM1, UserMM2 has Manager UserMMM
UserMMM can have its Manager as well and so and so.
Note: Recursive relationship of User and User's Manager could be deep up to 10 levels.
Each users will have access to many customers.
So technically, any customers assigned to the any user, the user will be able to see, And, their manager can see those customers too. Ofc, the manager of that manager will be able to see too. And the next level manager is the same.
======= Additional explanation ========
I have 10 clients = I can only view 10 clients
Pogba have 5 clients = He can view 5 clients.
Paul is my manager and he also has 5 clients = He can view 15 clients
Logan is Pual Manager and he also has 10 clients = He can view 25 clients (Me, Paul, and Logan clients)
Henry is Pogba and Logan Manager = He can view 30 clients (25 client from Logan and Logan's staff + 5 clients from Pogba )
so and so.
Thanks
So basically the latest (additional) explanation can be achieved easily with Appwrte teams (you group permissions). I recommend creating an users collection with a document for each user
How manager access his staffs , his staffs of staffs and ….. customers ?
Can you give me more explanation
When creating the document, you give permission to X team and X role have access to such document, read, delete, etc
User A has manager User B
User B has manager User C
User C has manager User D
User A1 has manager User B1,
User B1 has manager User C1
So and so on
How can we manage team when we have thousand of users
User A is in team A with role user. User B is in team A with role manager
Same with the remaining ones
but User B (manager) can have many other users (role user)
User B can have one Manager too.
In the same team?
can be same team, can be another team
Then add a superior role
the level of manager can be up to 10 levels
can you show me abit
As said, just make groups with roles and done
okay thank you
