I'm new to AppWrite and am currently working on a personal Vue project. I'm interested in implementing a permission system that enables users to access the documents they create while restricting other users to only read, update, and delete the documents they themselves have created. How can I accomplish this?
Have you read the permission docs? https://appwrite.io/docs/permissions
yes I have
So what are you thinking after reading the docs?
It's explaination is clear
I gave access to users to read, create, update and delete documents under a collection, I also enabled document security
The aspect I find difficult is, I don't want users to access things created by other users. For example, let's say it's a Todo app, with authentication. When a user logs in, he/she sees todo's created by him/herself, not someone else Todo.
That's what I trying to get 🥲
If you give users full CRUD access at the collection level, every user can update and delete every document
Yeah 👌
So... Don't do that
Okay, how do I make sure it's just the authorized logged in user that has crud access?
For example: When a user logs in, he/she should have crud access to messages created by them.
Document level permissions. And see https://appwrite.io/docs/advanced/platform/permissions#default-values
Okay thanks, I will look into this and provide feedback.
I removed permissions from collection level and enabled document security, but I get an unauthorised error
What operation are you doing? Does the user have access to perform the action?
It's a create operation
Since it's showing an unauthorized error I guess not
Hello Steven, I wanted to express my gratitude for your help and your patience. Finally, I've found the solution I was looking for, by following your instructions.
[SOLVED] permission
Recommended threads
- SSL certificate issuance failed:
Domain verifies but SSL cert fails, tried different subdomains like .api and .aw, used cname and CAA, no prior CAA existed on website, tried Multiple CAAs at on...
- Password check in function
Hi, is there any way now for checking if the users password is correct in a function? I am creating a delete user function and before deleting I would like to c...
- Deployment fails after 15+ minutes: "Wai...
Hi, I'm Jayden. My email is jaydthom@haverford.org, and i'm having persistent deployment failures with my Next.js project. What happens: Push to GitHub trigg...