Authorization RBAC with dynamic roles

viperfx · November 10, 2020, 3:58pm

@Chris thanks for sharing the code! That makes it super clear. Would love to hear from @dthyresson and others if they consider this good practice.

Chris, with regards to redirecting to the pickTeamPage. How is that handled when a user has a team picked already? or is this more like team selector page? so if it’s teams are empty they can create their first team from this screen, but if they have a team, they can select it and proceed to the application?

So does that mean you have the team slug or name, in all your URLs? such as /{teamSlug}/dashboard/ or do you use cookie and store the current selected team?

Edit

Here is how I implemented so far. Wanted to leave a gist so it’s useful for others.

gist.github.com

https://gist.github.com/viperfx/55a0055bb31f997d006e0b20edb177ff

feedbackPage.js

const FeedbackPage = ({id}) => {
  const { logIn, logOut, isAuthenticated, currentUser  } = useAuth()
  let { filter } = useParams()
  const { addMessage } = useFlash()
  return (
    <CoreLayout>
      <PageHeader title={"Feedback"}/>
      <div class="px-4 mt-6 sm:px-6 lg:px-8">
        <FeedbackListCell teamId={currentUser.currentTeam.id} filter={filter}/>
      </div>

This file has been truncated. show original

getCurrentUser.js

export const getCurrentUser = async (decoded, { _token, _type }) => {
  const account = await db.user.findOne(
    {
      where: {sub: decoded.sub},
      include: {
        currentTeam: true
      }
    },
  )
  if (!account) {

This file has been truncated. show original

pickTeamPage.js


const CREATE_CONTACT = gql`
  mutation CreateTeamWithNameMutation($input: CreateTeamInput!) {
    createTeamWithName(input: $input) {
      id
      name
    }
  }
`
const PickTeamPage = () => {

This file has been truncated. show original

There are more than three files. show original