Hello, I need some advice on how to manage some permissions on documents.
I have built an app for Party Planning. Multiple companies would use the app to manage their events. I am using one Database store store all the companies data and the reason is in this industry some employess work for multiple companies so they would pull up all the events that they are assigned to work which sometimes is for many companies.
The flow would be Companies that sign up for the app, would be a "Team", and would be assigned a 'owner' role on that team, They would be able to invite a sub contracted employee an add them to their team as a "staff" role.
The company would create events and would be added to the "Events" collection. So the events collection would have multiple companies events in it. I set the collection to use document permissions. and i can set the permissions only for that team to view. But i want the owners to be able to create and edit and the staff to be only to read.
Any suggestions on how to accomplish owners ful crud and staff only read?
Thanks!
Would this be correct? using a custom value team:655bcd94447a12a81b22/owner
Recommended threads
- Query multi-tenant db with $permissions ...
I'm setting up a multi-tenant database with RLS enabled. My users my have permissions set for multiple Teams, and as such when they query the database with the ...
- Realtime for files() works almost well, ...
I have been trying to make use of realtime, today (14.03.26) I have pulled all the latest versions of docker images, and sdk available. Whats working: - Conn...
- Weird permission failure
when creating an account I use following methods: ``` Future<void> register(String email, String password, String username) async { final user = await accoun...