How to add roles based permision which can be updated

[edden-app]

Hey, I am trying to figure how can I add permissions on various Collection through FireCMS.

I want to create admin panel for which I can add users and their role from Firebase and when the user logins it is showing the collections based on their role.

Its mentioned in the doc that their is a way to add these easily but I am not able to figure out how its done

Please help @fgatti675

[fgatti675]

Hi @edden-app

You can create a user collection where you define the roles:

export const userCollection = buildCollection<AdminUser>({
    name: "Users",
    customId: true, // Use email as ID
    properties: {
        name: {
            dataType: "string",
            name: "Name"
        },
        roles: {
            dataType: "array",
            name: "Roles",
            of:{
                dataType:"string",
                config:{
                    enumValues: {
                      admin: "Admin",
                      editor: "Editor",
                  }
                }
            }
        },
    }
});

Then use a custom authenticator to set your custom data in the auth controller, such as the roles for a user:

    const myAuthenticator: Authenticator = ({
                                              user,
                                              dataSource,
                                              authController
                                          }) => {
        if (!user?.email) return false;
        else {
            return dataSource.fetchEntity({
                path: "admins",
                entityId: user.email,
                collection: userCollection
            })
                .then((entity) => {
                    if (!entity) return false;
                    authController.setExtra({ roles: entity.values.roles });
                    return Boolean(entity);
                })
                .catch(e => {
                    console.error(e);
                    return false;
                });

        }
    };

Then use those roles to build your collections based on the user:

    return <FirebaseCMSApp
        name={"My Online Shop"}
        authentication={myAuthenticator}
        collections={({ authController }) => {
            // you can find the roles in authController.extra
            return collections;
        }}
        firebaseConfig={firebaseConfig}
    />;

[edden-app]

Thank you