DB: Permissions of User

[Bryant-Tang]

DB is currently allow all user to manipulate all data in DB.

[Bryant-Tang]

• Better solution: add "editors"、"viewers" for all models.
• Simple solution: use existed fields likes "members"、"contributors"... to determine the permission.

[quan0715]

So the editors、viewers field should be provide when calling api in front-end ? why add "editors"、"viewers" for all models might be a better solution?

[Bryant-Tang]

solution after discussion: example

{
    "members": [
        {
            "id": 1,
            "writable": true,
            "readable": true
        },
        {
            "id": 2,
            "writable": false,
            "readable": true
        }
    ]
}