如何在 Sequelize / Node.js 中设置沙箱帐户？

Question

I am trying to set up a sandbox user in Sequelize (that can read from the database, but cannot write / edit it). I already have my user model and relations in place. I can easily add a role enum to the user model to specify one or more "sandbox" accounts.

However, how should I go about setting those permission? Do I have to check every single database post / delete / update route against user permissions or can I use a middleware somehow?

Answer 1

You may need to create a table to store user wise, access on different database and different permissions (read/write etc).

Create a middleware which authorizes user and this middleware is responsible to authorize user to do action, based on that perform further actions