Comments (1)
Hey Dmitry, thanks for your question. There are no current plans to extend OperationPermissions
at this time. One of the design goals of Bramble is to keep the gateway as stateless and service-agnostic as possible. In your example, some amount of stateful lookup would be required to be performed by the gateway to determine whether access is authorised. IMHO this is best dealt with by underlying services and not the gateway itself. I would recommend you develop your authorisation logic in two passes - one coarse pass implemented at the gateway level (who can access which fields) and a second fine grained pass that contains more advance logic and is implemented by the underlying services. Hope that helps!
from bramble.
Related Issues (20)
- Impossible to use as a library HOT 3
- Read Configuration from Environment Variable HOT 1
- Refactor merge script to streamline `@boundary` directives HOT 5
- Union of @boundary Types HOT 2
- introspection query possible types not returned for interace HOT 1
- Fragment not working as expected for interface types HOT 4
- Request syntax error while trying to upload file HOT 5
- persisted queries HOT 1
- using Bramble as a library, add query/mutation resolvers in the gateway HOT 3
- Fragment not mapping fields for interface types HOT 7
- Lack of server timeouts HOT 1
- should bramble complain about built-in directives declared in spec? HOT 4
- Enabling/Disabling schema introspection HOT 6
- Types not used in any query are not getting into compiled schema? HOT 2
- Plugin` configuration doesnt depend on config changes HOT 3
- Differentiate log level depending on "response.status" HOT 4
- Schema being cached? HOT 1
- Cannot access timings HOT 3
- nested abstract fragment error if returned type not queried HOT 5
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from bramble.