Scoping only to resources user owns.
If I have an admin panel and a user panel, what is the recommended way to scope queries in the user panel only to the resources the logged in user has access to. Currently, I am using a model policy and a global scope on the policy. If the logged in user is an admin I do nothing in the scope and set all policies to true. If the logged in user isn't an admin, I use the queryBuilder to scope just to the resources the logged in user should have access to. Is this the recommended implementation or have I over complicated it?
0 Replies