search

bodgery / bodgery-member-api

1 stars 1 forks source link

Implement user permissions #5

Open frezik opened 5 years ago

frezik commented 5 years ago

A user can be given permissions to individual API calls. Superusers have access to all calls.

frezik commented 4 years ago

Tokens can have their own permissions. They must never have more permissions than the user who created them, and may have less.