Resource for a single user
How would you define a resource which is only accessible for a single user? That user can only see (and access) that resource and no others. I feel like adding policies to all is a bit cumbersome. So I thought there might be an easier solution.
5 Replies
I think you can also add
canView() to the resources.Does this also protect from accessing, create, deleting etc? In the other resources I mean (if they know the routes)
It should. But also needs to defined in every resource.
That should be fine, feels less cumbersome then defining policies for each resource
Thanks Dennis
You’re welcome