Access control + CRUD + User/Admin (OWN/ANY) profile

[michalfordonski]

Hi,
how to connect this repo with CRUD (https://github.com/nestjsx/crud)?
OWN / ANY is a problem displaying the profile. I would like ADMIN to be able to see all the profiles and USER only his own - both views would be based on the same method in CRUD. How to make roles detect if an object in the database is added by a logged in user or someone else?

[ruslanguns]

This is a matter of using the decorators overriding each methods OR using the built in permissions which you can find right there:

https://github.com/nestjsx/crud/wiki/Controllers#additional-decorators

[zealotrahl]

@ruslanguns, So, there is no direct way to to integrate nest-access-control ACGuard with nestjsx / crud ?, I must override CRUD generated methods or wirte my custom guard?

[ruslanguns]

Chekout their wiki I'm sure they have something regarding roles, but not sure it is based on nest-access-control package. El jue., 27 ago. 2020 20:16, Fakhriddin <[email protected]> escribió:

…

@ruslanguns <https://github.com/ruslanguns>, So, there is no direct way to to integrate nest-access-control ACGuard with nestjsx / crud ?, I must override CRUD generated methods or wirte my custom guard? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#36 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AEXDV6CJAESAEJU2RVJOE3TSC2WIXANCNFSM4ONKBZMQ> .

[zealotrahl]

Yup, thanks, I guess they specially left https://github.com/nestjsx/crud/wiki/Controllers#additional-decorators for this.

[ibnukipa]

Hi @zealotrahl, How did you integrate it with @nestjsx/crud? did you create your own ACLGuard?

[zealotrahl]

Hi @zealotrahl, How did you integrate it with @nestjsx/crud? did you create your own ACLGuard?

Hi, Yup, like translating crud requests for ACL guard requests, and that did it
const translations = { 'Read-Many': 'readAny', 'Read-All': 'readAny', 'Read-One': 'readAny', 'Create-One': 'createAny', 'Create-Many': 'createAny', 'Update-One': 'updateAny', 'Replace-One': 'updateAny', 'Delete-One': 'deleteAny', };