search

IlmConnect / IlmConnect-V2-Old

3 stars 0 forks source link

Authorization #39

Closed Aelbannan closed 1 year ago

Aelbannan commented 1 year ago

School + class level roles

Aelbannan commented 1 year ago

We need ways to:

  1. Declare what combination of permissions are allowed to access an endpoint (eg. school or course roles, and ownership/share permissions), similar to Zod
  2. Create middleware to restrict these endpoints

Easy way to start is to just start with school (user) roles

Might be useful to look into Passport JS, they might have something already built for this