javascript - how give different privilege for user and admin in mongodb -


i'm creating application using sails , mongodb. need 3 level of user.

  • super admin
  • admin
  • user

i want give different privileges each of user

  • super admin can access whole db.
  • admin can access data relate field
  • user can access data related user.

so how user different schema different type of user. , restrict 1 user access other resources.

i want give different privileges each of user

  • super admin can access whole db.
  • admin can access data relate field
  • user can access data related user.

what need document-level access control user can access document based on value in particular field. unfortunately, as of version 3.0, there not yet built in way provide access-control @ document/field level. mongo's acls go collection-level only.

..so how use different schema different type of user. , restrict 1 user access other resources.

because of reasons mentioned above, impossible @ database level alone if 'resource' mean 'document'. however, can still manage achieve similar functionality on application level(sailjs). @ database level, best can is- move users document different collection. mat use createrole() method create role , specify privilege.

for superadmins:

db.createrole({ role: "superadmin",   privileges: [     { resource: { db: "mycustomdb", collection: "" }, actions: [ "find", "update", "insert", "remove" ]}   ],   roles: [] })

superadmins have access collections in mycustomdb database , perform find, update, insert , remove actions

for admins:

db.createrole({ role: "admin",   privileges: [     { resource: { db: "mycustomdb", collection: "admincollection" }, actions: [ "find", "update", "insert", "remove" ]},     { resource: { db: "mycustomdb", collection: "" }, actions: [ "find"]}   ],   roles: [] })

admins can access documents in own collection , perform crud operations. however, have read-only access other collection in database.

for users:

db.createrole({ role: "user",   privileges: [     { resource: { db: "mycustomdb", collection: "usercollection" }, actions: [ "find", "update", "insert", "remove" ]}   ],   roles: [] })

note: if using version 2.4(or below), need move users collection different database. mongodb 2.4(and below) acls go database-level only.


Comments

Post a Comment

Popular posts from this blog

How to connect android app to App engine -

i'm trying connect app in android server i've opened on appengine. my server's name : dddd-daniel-2345 , website server : http://dddd-daniel-2345.appspot.com/ this how connect android app server in app engine: app.yaml: application: dddd-daniel-2345 version: 1 runtime: python27 api_version: 1 threadsafe: yes handlers: - url: .* script: main.app libraries: - name: webapp2 version: "2.5.2" main.py: #!/usr/bin/env python # # copyright 2007 google inc. google.appengine.api import users import webapp2 class userhandler(webapp2.requesthandler): def get(self): user = users.get_current_user() if user: greeting = ('%s,%s,%s' % (user.email(),user.user_id(),user.nickname())) else: greeting = ('not logged in') self.response.out.write(greeting) app = webapp2.wsgiapplication([('/', userhandler),], debug=true) my applications code : add manifast main....
Read more

gcc - MinGW's ld cannot perform PE operations on non PE output file -

i know there other similar questions out there, stackoverflow or not. i've researched lot this, , still didn't find single solution. i'm doing operative system side project. i've been doing in assembly, wanna join c code. test, made assembly code file (called test.asm): [bits 32] global _a section .text _a: jmp $ then made c file (called main.c): extern void a(void); int main(void) { a(); } to link, used file (called make.bat): "c:\mingw\bin\gcc.exe" -ffreestanding -c -o c.o main.c nasm -f coff -o asm.o test.asm "c:\mingw\bin\ld.exe" -ttext 0x100000 --oformat binary -o out.bin c.o asm.o pause i've been researching ages, , i'm still struggling find answer. hope won't flagged duplicate. acknowledge existence of similar questions, have different answers, , none work me. question: what doing wrong? old mingw versions had problem "ld" not able create non-pe files @ all. maybe current versions...
Read more

php - display validation error message next to the textbox in codeigniter -

Image
i'm newbie codeigniter.i want display error message next text box.my view file create.php contains following code. <?php echo validation_errors(); //validation echo form_open('news/create'); //create form ?> <div class="boxes"> <div class="common"> <div class="lables"> <label for="name">name</label> </div> <div class="text_boxes"> <input type="text" name="uname" /><div id="infomessage"><?php echo $message;?></br> </div> </div>` and below controller model: public function create() { $this->load->helper('form'); $this->load->library('form_validation'); $data['title'] = 'insert items'; $this->form_validation->set_rules('uname','required|min_length[6]|m...
Read more