RBAC (Role based access control)

RBAC (role based access control) is an API and cloud security method for enforcing app permission based on a user's role. The RBAC governance is directly integrated into the Xano platform. There are two different methods in Xano to accomplish RBAC / permissions. Both methods center around authenticated API requests and the user's authorization token (JWE token). The first method queries the user's record based on the authorization ID to pass along the user's role. The second method uses an advanced topic called extras, which stores the user's role in the authorization token.

Visit Xano - The Fastest No Code Backend Development Platform

[willhill]

Perfecting timing! I was only thinking about how to do this yesterday!

[hena]

The exact video i was looking for thank you very helpful

[kevinwasie]

There should be a comment under the Auth Token selection on test/debug that tells someone that "This auth token does not include extras, etc." That would have saved me beating my head against the wall and wanting to throw my monitor out the window because. I was almost to the point of opening adobe photoshop and going pixel by pixel to make sure I was typing everything correctly. ;)

[sarwalgaurav]

How to implement attribute-based access on field level? Also, can we create user groups assign them access depending upon the group. Are you using some framework for API security like OAuth 2.0 etc or its custom framework built by you.