graphile / graphile/graphile.github.io
Workflows for administrative tasks?
- Dominant language
- SCSS
- Stars
- 27
- Forks
- 126
- PR merge metrics
- No merged PRs in 30d
Description
Reference: https://github.com/postgraphql/postgraphql/issues/488
Could you please further explain following points with an example.
> Then I modify the JWT role based on whether or not the user is an admin (appname_admin) or not (appname_visitor). I also set a JWT claim for admin for when security definer is used somewhere (since that effectively changes the role) so I can use a current_user_is_admin() method in my DB logic.
> (Authenticator is the default role that PostGraphQL assumes, I grant that role only enough permissions to introspect the schema and no more, plus of course the ability to switch to one of the relevant roles based on the JWT)
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading the referenced PostGraphQL issue #488 and the quoted discussion about JWT roles, the authenticator role, and security-definer functions. Document the administrative and visitor workflow with a concrete example; done means the quoted points are explained clearly enough for a reader to apply them.
Written by the indexing model from the issue text.
Assessment
- Domain
- authentication, authorization, documentation
- Issue type
- Documentation
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100