phalcon-json-api-package
phalcon-json-api-package copied to clipboard
Object Level Security
Let's add in some security tools that allow developers to more easily and reliably apply security rules in common situations. The design goal is to make it possible for developers to define a minimum set of rules that will enforce security rules in a variety of situations.
Rules
- READ Rules when getting 1 or more records from an end point
- reuse filter rules when side loading data
- Block/Allow rules to Edit/Delete/Insert records
Implement Edit/Delete/Insert records as hooks before the operation is performed. Can we ready in these rules from a common syntax or from the READ rules?