[DISCUSSION] Default read/write permissions for Document Creation

[appwrite]

[DISCUSSION] Default read/write permissions for Document Creation

[eldadfux]

I think this suggestion can lower the entry barrier for a developer starting to work with Appwrite because it will allow them to begin working with databases and files without requiring them to understand the permission mechanism first.

One issue I am not sure about is what the default should be in cases where we don’t have a logged-in user like when integrating from the server, or when the user is just a guest and have no account.

We should also find out what is the best way to reflect this in the documentation and other guides that might require understanding this process.

[christyjacob4]

I agree documentations is a must, but we also need to make sure that the getting started guide is easy as possible for people just wanting to play around and get to know Appwrite without diving into all the little details straight away.

Yes if we write the documentation with a lot of examples, then it'll definitely be easy for people to get started. Here's what im suggesting.

1. The getting started guide needs to happen regardless. That can contain examples and theory behind appwrite. It must explain about the roles and permissions and also mention that the default permissions are for the current user and admin to read and write, but these permissions can be modified as per you use case

[eldadfux]

@christyjacob4 100% about the examples, this is something we really lack right now in this permissions tutorial: https://appwrite.io/docs/permissions

I will add it to my checklist ✅

[christyjacob4]

Are we going to allow anonymous users to create documents as well ??

In the documentation I feel we can have a getting started section that explains to the users regarding the various permissions. The getting started section will give an overview of appwrite and explain all the nuances specific to appwrite including permissions and rules.

[eldadfux]

@christyjacob4 Currently we do allow anonymous users to create documents, but we can always review and see if this is a real use case or can just be customised and implemented using a server integration. This still leaves us with the question of what happens on a server-to-server integration.

I agree documentations is a must, but we also need to make sure that the getting started guide is easy as possible for people just wanting to play around and get to know Appwrite without diving into all the little details straight away.

[eldadfux]

Just to keep this thread up-to-date.

We have updated the permissions docs, making them a lot simpler to understand and we have also added some usage examples: https://appwrite.io/docs/permissions

[eldadfux]

We have also updated our default values. From the client side, read and write will be given to the current user by default, on the server API it will be empty for both read and write unless set.