how to perform acton to collectons which React Native SDK user having no permission.
actually, I can give them permissons but considering it would be redudancy and wastes of resources as well as performances. I decided for nextjs (node-apwrite), I only give permission document level to Clients collection. By doing that, other collections which are considered using clients collection as FK, will be based on to verify the permissions.
Based on code below, I can do that fine on NextJS server action, but I would like to do the same for react native but I also understand RN is client framework. so what is the workaround for this
export async function queryHealthRecords(clientId: string): Promise<ActionResult<HealthRecords>> {
// check if user can access by finding specific document of Clients collection to see its permission against logged in user
const hasPermission = await hasPermissionByClient(clientId)
if (!hasPermission) return []
const db = await createAdminDB()
const models = await db.healthRecords.list([Query.equal("clientId", clientId), Query.limit(maxQueryLimit), Query.orderDesc("recordDate")])
return await Promise.all(models.documents.map(async (model: any) => await mapToHealthRecordDto(model)))
}
Recommended threads
- [SOLVED] Query.search() returning all ro...
When I use Query.search() instead of returning rows with the keywords provided it just returns all the rows in the table.
- 1:1 relationship doesn’t sync after re-a...
Hi, I’m trying to use a two-way one-to-one relationship. It works fine when I create a record with the relationship set, and it also works when I unset it. But ...
- Upsert with setting permissions
Hi there, I am using self-hosted appwrite v1.7.4 and trying to use the bulk update stuff that was released with 1.7.x. Unfortunally I found that there is an ser...