I'm new to AppWrite and am currently working on a personal Vue project. I'm interested in implementing a permission system that enables users to access the documents they create while restricting other users to only read, update, and delete the documents they themselves have created. How can I accomplish this?
Have you read the permission docs? https://appwrite.io/docs/permissions
yes I have
So what are you thinking after reading the docs?
It's explaination is clear
I gave access to users to read, create, update and delete documents under a collection, I also enabled document security
The aspect I find difficult is, I don't want users to access things created by other users. For example, let's say it's a Todo app, with authentication. When a user logs in, he/she sees todo's created by him/herself, not someone else Todo.
That's what I trying to get 🥲
If you give users full CRUD access at the collection level, every user can update and delete every document
Yeah 👌
So... Don't do that
Okay, how do I make sure it's just the authorized logged in user that has crud access?
For example: When a user logs in, he/she should have crud access to messages created by them.
Document level permissions. And see https://appwrite.io/docs/advanced/platform/permissions#default-values
Okay thanks, I will look into this and provide feedback.
I removed permissions from collection level and enabled document security, but I get an unauthorised error
What operation are you doing? Does the user have access to perform the action?
It's a create operation
Since it's showing an unauthorized error I guess not
Hello Steven, I wanted to express my gratitude for your help and your patience. Finally, I've found the solution I was looking for, by following your instructions.
[SOLVED] permission
Recommended threads
- No server error on selfhosted appwrite
Please help me, my clients is ask what happen on their data? How can i make it up again?
- Upgrading selfhost version?
It is okay to upgrade version to higher one, of my current version is 1.7.4 to 1.8.1. Is that safe to do cause my clients already have data on that? Also is a...
- Streamlit UI and local DB
I want to use Appwrite for automation, like run watchdog service every morning 3 am. Anyone got suggestions, already explored github and documentation no luck. ...