View Source ExTeal.Policy behaviour (ExTeal v0.27.0)

A Policy authorizes CRUD use of a resource based on the Plug.Conn

Summary

Can a user create a resource? Returning false will disable the '+' button on a resource and return a 403 on api requests

Can a user delete any resource? Returning false will disable the 'delete' buttons on all resource records and return a 403 on api requests

delete_any?(t)

Can a user delete any resource? Returning false will disable the 'delete' buttons on all resource records and return a 403 on api requests

Can a user update any records? Returning false will disable the 'edit' button on a record and return a 403 on api requests

update_any?(t)

Can a user update any records? Returning false will disable the 'edit' button on a record and return a 403 on api requests

view?(t, struct)

Can the resource be viewed at all? Returning false will hide the resource in the sidebar and in relationships and return a 403 on api requests

view_any?(t)

Can the resource be viewed at all? Returning false will hide the resource in the sidebar and in relationships and return a 403 on api requests

@callback create_any?(Plug.Conn.t()) :: boolean()

Can a user create a resource? Returning false will disable the '+' button on a resource and return a 403 on api requests

@callback delete?(
  Plug.Conn.t(),
  struct()
) :: boolean()

Can a user delete any resource? Returning false will disable the 'delete' buttons on all resource records and return a 403 on api requests

@callback delete_any?(Plug.Conn.t()) :: boolean()

Can a user delete any resource? Returning false will disable the 'delete' buttons on all resource records and return a 403 on api requests

@callback update?(
  Plug.Conn.t(),
  struct()
) :: boolean()

Can a user update any records? Returning false will disable the 'edit' button on a record and return a 403 on api requests

@callback update_any?(Plug.Conn.t()) :: boolean()

Can a user update any records? Returning false will disable the 'edit' button on a record and return a 403 on api requests

@callback view?(
  Plug.Conn.t(),
  struct()
) :: boolean()

Can the resource be viewed at all? Returning false will hide the resource in the sidebar and in relationships and return a 403 on api requests

@callback view_any?(Plug.Conn.t()) :: boolean()

Can the resource be viewed at all? Returning false will hide the resource in the sidebar and in relationships and return a 403 on api requests