devinivy / bedwetter

Auto-generated, RESTful, CRUDdy route handlers for Waterline models in hapi
64 stars 11 forks source link

Tie in with hapi credentials. #2

Closed devinivy closed 10 years ago

devinivy commented 10 years ago

Allows a user to act on behalf of herself. E.g., /users/10/follow/2 becomes /i/follow/2.

Also allows potential implementation of document ownership. A user can only update an item if he owns it.

devinivy commented 10 years ago

Big question: if a user is unauthorized, should she receive an Unauthorized or a Not Found?

devinivy commented 10 years ago

Per 1.1.0, this is closed. Includes document ownership.