I'm new to AppWrite and am currently working on a personal Vue project. I'm interested in implementing a permission system that enables users to access the documents they create while restricting other users to only read, update, and delete the documents they themselves have created. How can I accomplish this?
Have you read the permission docs? https://appwrite.io/docs/permissions
yes I have
So what are you thinking after reading the docs?
It's explaination is clear
I gave access to users to read, create, update and delete documents under a collection, I also enabled document security
The aspect I find difficult is, I don't want users to access things created by other users. For example, let's say it's a Todo app, with authentication. When a user logs in, he/she sees todo's created by him/herself, not someone else Todo.
That's what I trying to get 🥲
If you give users full CRUD access at the collection level, every user can update and delete every document
Yeah 👌
So... Don't do that
Okay, how do I make sure it's just the authorized logged in user that has crud access?
For example: When a user logs in, he/she should have crud access to messages created by them.
Document level permissions. And see https://appwrite.io/docs/advanced/platform/permissions#default-values
Okay thanks, I will look into this and provide feedback.
I removed permissions from collection level and enabled document security, but I get an unauthorised error
What operation are you doing? Does the user have access to perform the action?
It's a create operation
Since it's showing an unauthorized error I guess not
Hello Steven, I wanted to express my gratitude for your help and your patience. Finally, I've found the solution I was looking for, by following your instructions.
[SOLVED] permission
Recommended threads
- Custom API domain is unreachable
Earlier my custom api domain was working fine. Now it seems to be offline without a trace a few hours later. I didn't change anything, all the relevant DNS reco...
- "Invalid console fingerprint" when unpau...
I've tried logging out and logging back in, still can't figure out why this is happening.
- Inviting members while SMTP is disabled ...
Issue: https://github.com/appwrite/console/issues/3125 PR: https://github.com/appwrite/console/pull/3126