Feature request · Permissions & security · Blocks work
Permission checks based only on session variables
1 source thread · first seen 2020-01
Summary
Permission checks can only compare columns to session variables, so checking a list of permissions in the JWT requires a database lookup; a check purely on the session value is wanted.
- Affects
- teams embedding permission lists in JWT claims
- Workaround
- Look up permissions from a table inside the permission rule
Evidence
Excerpts are copied word for word from the source; follow the link to read it in full.
“Being able to create a permission checks entirely from a session variables would be amazing”