The security model is setup to allow roles to be given to users and have endpoints for part of the frontend restrict access.
Currently there is only the Admin role, but we should have a role for each section to allow Create/Update/Delete, and just allow Read for every authenticated user.
drbenschmidt
commented
3 years ago
The security model is setup to allow roles to be given to users and have endpoints for part of the frontend restrict access.
Currently there is only the Admin role, but we should have a role for each section to allow Create/Update/Delete, and just allow Read for every authenticated user.