
I'm building a web app and instead of using Appwrite Auth, I made my own custom auth system that stores user data in documents. I have a "Profile" page where logged-in users can update their username and password. The route is already protected — only authenticated users can access it. My question is: how do I make sure that only the owner of the profile (or someone with permissions) can update that specific document in the collection? Since I'm not using Appwrite's built-in users, I'm not sure how to handle document-level permissions properly in this case. What should i do?
Recommended threads
- Get current users team
Hey for one of my use cases I need to get my current logged in user's team. But by default the scope to read the team is not added. ``` const appwriteClient...
- How to reduce DB Reads?
I just noticed that I hit the 500k db reads limit on my very small next js app with the most data being present in one collection having around 50 documents. ...
- Getting issue while migrating from Self ...
i try to migrating my project but when do this error come and dont allow to crate that migration
