Databases

Setup Permissions to only allow resource owners for access

Jan 7, 2026, 16:03Last activity 8 months ago

View on Discord

Votes

Replies

Participants

Messages

tiMoOriginal post

Web Developer

Jan 7, 2026, 15:59

I would like to know how you do this in Appwrite Databases. Any ideas?

Summary

Set up permissions to only allow resource owners for access by implementing row security in TablesDB. Here are examples in TypeScript for both TablesDB and Collection-based databases using the Appwrite SDK in a Next.js application. The code snippets show how to create a new record with specific permissions for the resource owner by setting read, update, and delete permissions based on the user ID. Remember to adjust the code to include your specific database schema and permissions if needed.

Devika

Jan 7, 2026, 16:42

For that, firstly you'll have to set row security via the Console, then you can add the specific permissions via your code .

Devika

Jan 7, 2026, 16:43

Can you tell which language or framework you're using?

tiMo

Web Developer

Jan 7, 2026, 18:08

i use nextjs

tiMo

Web Developer

Jan 7, 2026, 18:08

thanks

tiMo

Web Developer

Jan 7, 2026, 18:09

could you provide me an example?

Devika

Jan 7, 2026, 18:36

Sure, but since I don't know whether you're using TablesDB or earlier Collection based DB, I'll give you the example for both:

For TablesDB you can do something like this:

TypeScript

import { Client, TablesDB, ID, Permission, Role } from "appwrite";

const client = new Client()
  .setEndpoint(process.env.NEXT_PUBLIC_APPWRITE_ENDPOINT!)
  .setProject(process.env.NEXT_PUBLIC_APPWRITE_PROJECT_ID!);

const tablesDB = new TablesDB(client);

export async function createANewRecord(userId: string) {
  return await tablesDB.createRow(
    "DATABASE_ID",
    "TABLE_ID",
    ID.unique(),
    {
      createdAt: Date.now()
    },
    [
      Permission.read(Role.user(userId)),
      Permission.update(Role.user(userId)),
      Permission.delete(Role.user(userId))
    ]
  );
}

And for the Collections DB you can do something like this:

TypeScript

import { Client, Databases, ID, Permission, Role } from "appwrite";

const client = new Client()
  .setEndpoint(process.env.NEXT_PUBLIC_APPWRITE_ENDPOINT!)
  .setProject(process.env.NEXT_PUBLIC_APPWRITE_PROJECT_ID!);

const databases = new Databases(client);

export async function createANewRecord(userId: string) {
  return await databases.createDocument(
    "DATABASE_ID",
    "COLLECTION_ID",
    ID.unique(),
    {
      createdAt: Date.now()
    },
    [
      Permission.read(Role.user(userId)),
      Permission.update(Role.user(userId)),
      Permission.delete(Role.user(userId))
    ]
  );
}

This was just an example, instead of that createdAt: Date.now() you can put any other column name + value pair as per your DB schema. Also, you can set different permissions too as per your choice & requirement.

tiMo

Web Developer

Jan 7, 2026, 18:53

ok, then i am well-prepared. thank you (i am using the new approach: table-based databases)

Setup Permissions to only allow resource owners for access

Need support?_