paulononato/backstage
1
0
Fork 0
Code Issues Pull Requests Actions 21 Packages Projects Releases Wiki Activity

Merge pull request #24706 from AmbrishRamachandiran/resource-permission-check

Browse Source 
Updated document of resource permission check
This commit is contained in:
Fredrik Adelöw
2024-05-14 07:53:46 +02:00
committed by GitHub
parent 95ee6d6a24 48086b590f
commit ef5cb5abf2
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/permissions/plugin-authors/03-adding-a-resource-permission-check.md
+5 -1
View File
@@ -144,7 +144,11 @@ export const rules = { isOwner };
`makeCreatePermissionRule` is a helper used to ensure that rules created for this plugin use consistent types for the resource and query.
> Note: To support custom rules defined by Backstage integrators, you must export `createTodoListPermissionRule` from the backend package and provide some way for custom rules to be passed in before the backend starts, likely via `createRouter`.
:::note Note
To support custom rules defined by Backstage integrators, you must export `createTodoListPermissionRule` from the backend package and provide some way for custom rules to be passed in before the backend starts, likely via `createRouter`.
:::
We have created a new `isOwner` rule, which is going to be automatically used by the permission framework whenever a conditional response is returned in response to an authorized request with an attached `resourceRef`.
Specifically, the `apply` function is used to understand whether the passed resource should be authorized or not.