empower-permission

empower-permission

Given a permission set and a request return a permission token.

it will look in the PermissionMap for for a url that matches the given URL. If found, then it will return the BasePermissionToken associated with that URL. Otherwise, it will return the GeneralAccessToken or '*'.

Once it has the base permission token then it will append the interpreted Method (Action) to the token using a : character separator.

PermissionToken

Example Token Strings:

'token:entity:create`
`token:entity:update`
`token:entity:sub-entity:read`

NOTE what precedes the :<action> is entirely up to what you put in the PermissionMap you provide.

PermissionMap

This is a map of URL strings to PermissionTokens

Example Map:

{
  "url/token/entity": "token:entity",
  "url/token/entity/action": "token:entity:action!"
}

Note adding ! to the end of your token marks anything after the last : as an action.

Method

This is either an HTTP Method or a custom action. It will be interpreted into one of the following:

• READ (GET)
• WRITE (POST / PUT)
• CREATE (POST)
• UPDATE (PUT)
• DELETE (DELETE)
• CUSTOM ACTION