graphile / graphile/graphile.github.io

Workflows for administrative tasks?

Open
#23 0 comments 1 reaction 0 assignees View on GitHub
Dominant language
SCSS
Stars
27
Forks
126
PR merge metrics
No merged PRs in 30d

Description

Reference: https://github.com/postgraphql/postgraphql/issues/488

Could you please further explain following points with an example.

> Then I modify the JWT role based on whether or not the user is an admin (appname_admin) or not (appname_visitor). I also set a JWT claim for admin for when security definer is used somewhere (since that effectively changes the role) so I can use a current_user_is_admin() method in my DB logic.

> (Authenticator is the default role that PostGraphQL assumes, I grant that role only enough permissions to introspect the schema and no more, plus of course the ability to switch to one of the relevant roles based on the JWT)

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reading the referenced PostGraphQL issue #488 and the quoted discussion about JWT roles, the authenticator role, and security-definer functions. Document the administrative and visitor workflow with a concrete example; done means the quoted points are explained clearly enough for a reader to apply them.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, authorization, documentation
Issue type
Documentation
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.