Title: Structuring a Membership App for Subscribers with Exclusive Content Access

[Apple]

Hi,

@daniel_jackman

Access to content will also depend on membership levels or user roles.

This is the hardest thing to decide, and I'm not an expert in such architectures but I'll try to answer anyway.

Membership levels can be numbers from 0 to whatever, or user roles can be like "member-plus", "member-premium". Or you can have a table that grants certain content/course to a user ID:

course_id, user_id
30, 1

My personal opinion, what provides the most flexibility is the last approach above - that's what I would choose.

In the websites I build I only use Database Security provider, I don't use User Roles (I'm not familiar with them), every logic I build manually using Conditions to check if the user is allowed to access a given resource. I also make use of Global steps ("Globals") to run those checks:

Security Restrict Global Restriction on API actions

Hey everyone just a quick question. I was trying to think of a quicker and easier way (and hopefully more foolproof way) to ensure that all the actions that need protecting are protected. Rather than having to add the security restrict to each api workflow each time. What I have done is added a Condition in the Global.Json which does a condition to see if the $server.url contains the path I am looking for. It will then run my security Restrict. Is this the best way to do this or is there a bett…