Some bad restrict stuff
This commit is contained in:
@@ -26,10 +26,10 @@ service ReviewsService {
|
|||||||
|
|
||||||
// Access control restrictions
|
// Access control restrictions
|
||||||
annotate ReviewsService.Reviews with @restrict:[
|
annotate ReviewsService.Reviews with @restrict:[
|
||||||
{ grant:'READ', to:'any' }, // everybody can read reviews
|
{ grant:'GET', to:'any' }, // everybody can read reviews
|
||||||
{ grant:'CREATE', to:'authenticated-user' }, // users must login to add reviews
|
{ grant:'CREATE', to:'authenticated-user' }, // users must login to add reviews
|
||||||
{ grant:'UPDATE', to:'authenticated-user', where:'reviewer=$user' },
|
{ grant:'UPDATE', to:'authenticated-user', where:'reviewer=$user' },
|
||||||
{ grant:'DELETE', to:'admin' },
|
{ grant:'DELET', to:'admin' },
|
||||||
];
|
];
|
||||||
|
|
||||||
annotate ReviewsService with @restrict:[
|
annotate ReviewsService with @restrict:[
|
||||||
|
|||||||
Reference in New Issue
Block a user