Dynamic bindings in conditions of Permissions

[mebeingken]

Would be great if we could dynamically bind the value of a condition when setting up permissions.

The use case here is a multi-tenant setup, where users can be members of multiple tenants, so their role may be different based on the different tenant.

EDIT: RELATED REQUEST: Also make the cookie domain of a security provider dynamic…or if that is not an option, target specific.

[bpj]

You could already do this by having a permissions table in the DB that maps the user ID to permissions profile(s) with a column identifying the tenant. You would then create a view that joins the user table to the profile which would be the basis of your permission step.

That being said, I do agree that it would be handy to have dynamic bindings available!

[Hyperbytes]

Is this not the same, long standing feature request

Extend Security Provider with Permissions from Database

The problem is that the query generated acts upon the security provider so the permission name MUST be defined within the security provider to work so trying to define a new permission type outside the security provider definition will not be possible. I would be nice to be able to be able to “inject” a new permission via a query but that would require code changes to the security provider and I don’t know if that would be feasible . You need to ask @George about that one.

[mebeingken]

Seems like that might be the case.

[JonL]

Similar but I think that using SC bindings makes more sense.

Right now we have a hard-coded permission system.

Implementing a database hardcoded approach would just extend a tiny bit the options. What if I want to store my permissions on a file? Or what if I want to implement a custom module that spits my permissions.

All in all, I think bindings(which cover DBs) make more sense and results in a more Wapplery way.

[Roney_Dsilva]

Bump!

[Apple]

Bump again after the 4th of May, when Wappler updates resume

[Roney_Dsilva]

Bump!!

[JonL]

I already started working on building middleware and SC actions for Casbin:

GitHub - casbin/casbin: An authorization library that supports access control...

[Roney_Dsilva]

Cashbin sounds like a good option but would mean a custom module/API calls just to handle those ACL requests, eg role, and rights would need to be passed across separately.
As “Security Restrict” already handles the authentication part, it would be nice to have it handle the dynamic permissions as well.

And for Frontend restrictions we could have them passed down in the cookies so we can restrict certain elements based on permissions.

@George @patrick, We have already hit more than 20 votes on this, Any chances of having this feature in future updates?

[Roney_Dsilva]

Would be much better to have it this way

Dynamic Permissions.zip (5.9 KB)
Sharing the files that I had to change for this functionality.
@patrick, Could you please have a look at it, we could also have a checkbox for dynamic or regular and conditional clause OR/AND, this would be of great help.

[Future]

@Roney_Dsilva that looks impressive… do you think it could be made as an addon module? Not sure how to implement your functionality and i’m pretty sure any update overwrites these files?